R3721-F3210-F3171-HP High-End Firewalls VPN Command Reference-6PW101

183
You can use the ip binding vpn-instance command on the tunnel’s source interface to specify the VPN to
which the tunnel source address belongs. The tunnel source address and the tunnel destination address
must belong to the same VPN or both belong to the public network.
Examples
# On interface Tunnel 0, specify that the tunneled packets belong to the VPN vpn10.
<Sysname> system-view
[Sysname] ip vpn-instance vpn10
[Sysname-vpn-instance-vpn10] route-distinguisher 1:1
[Sysname-vpn-instance-vpn10] vpn-target 1:1
[Sysname-vpn-instance-vpn10] quit
[Sysname] int GigabitEthernet 0/2
[Sysname-GigabitEthernet0/2] ip binding vpn-instance vpn10
[Sysname-GigabitEthernet0/2] ip address 1.1.1.1 24
[Sysname-GigabitEthernet0/2] quit
[Sysname] interface tunnel 0
[Sysname-Tunnel0] tunnel-protocol dvpn udp
[Sysname-Tunnel0] source GigabitEthernet 0/2
[Sysname-Tunnel0] tunnel vpn-instance vpn10
vam client
Syntax
vam client client-name
undo vam client
View
Tunnel interface view
Default level
2: System level
Parameters
client-name: Name of an existing VAM client, a case-insensitive string of 1 to 31 characters.
Description
Use vam client to bind a VAM client to a DVPN tunnel interface.
Use undo vam client to remove the binding.
By default, a DVPN tunnel interface is bound with no VAM client.
A DVPN tunnel interface can be bound with only one VAM client.
Related commands: interface tunnel and tunnel-protocol.
Examples
# Bind VAM client abc to DVPN tunnel interface Tunnel 0.
<Sysname> system-view
[Sysname] interface tunnel 0
[Sysname-Tunnel0] vam client abc