F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices VPN Configuration Guide-6PW100

455
88B
Configuring DVPN at the CLI
309BDVPN configuration task list
When configuring DVPN, perform configuration in this order: the VAM server, the hubs, the spokes.
Complete the following tasks to configure DVPN:
Task Remarks
Server side configuration
1061H
Configuring AAA Optional.
1062H
Configuring the VAM server Required.
Client side configuration
1063H
Configuring a VAM client Required.
1064H
Configuring an IPsec profile Optional.
1065H
Configuring DVPN tunnel parameters Required.
1066H
Configuring routing Required.
310BConfiguring AAA
A VAM server can employ AAA to authenticate the identities of clients accessing a VPN domain. For
AAA configuration, see Security Configuration Guide.
311BConfiguring the VAM server
Complete the following tasks to configure a VAM server:
Task Remarks
1067H
Creating a VPN domain Required.
1068H
Enabling VAM server Required.
1069H
Configuring the listening IP address and UDP port number Optional.
1070H
Configuring security parameters for VAM protocol packets Optional.
1071H
Specifying the client authentication mode Optional.
1072H
Specifying a hub Required.
1073H
Configuring the pre-shared key of the VAM server Required.
1074H
Configuring keepalive parameters Optional.
628BCreating a VPN domain
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Create a VPN domain and
enter VPN domain view.
vam server vpn vpn-name No VPN domain exists by default.