R3721-F3210-F3171-HP High-End Firewalls VPN Configuration Guide-6PW101

Figure 10 Network diagram

NOTE:

Before the configuration, make sure that Device A and Device B have IP connectivity to each other.

Configuring Device A

# Configure an IPv4 address for each interface and assign the interfaces to security zones. (Details not

shown.)

# Create a GRE tunnel interface.

• Select VPN > GRE > GRE from the navigation tree and then click Add to perform the configurations

shown in Figure 11.

Figure 11 Creating a GRE tunnel interf

ace

• Enter 0 in the Tunnel Interface field.

• Enter IP address/mask 10 .1. 2 .1 / 2 4 .

• Select Trust from the Zone list. (Select a security zone according to your network configuration.)

• Enter the source end IP address 1.1.1.1, the IP address of GigabitEthernet 0/1.

• Enter the destination end IP address 2.2.2.2, the IP address of GigabitEthernet 0/1 on Device B.

• Click Apply.

# Configure a static route from Device A through interface Tunnel0 to Group 2.

• Select Network > Routing Management > Static Routing from the navigation tree and then click

Add to perform the configurations shown in Figure 12.