R3721-F3210-F3171-HP High-End Firewalls VPN Configuration Guide-6PW101

vii
User access to SSL VPN ······································································································································ 372
SSL VPN configuration example ························································································································ 376
Configuring DVPN ·················································································································································· 394
Feature and hardware compatibility ·························································································································· 394
DVPN overview ···························································································································································· 394
Basic concepts of DVPN ····································································································································· 394
Operation of DVPN ············································································································································· 395
Networking structures of DVPN ························································································································· 395
Implementation of DVPN ···································································································································· 396
Supported DVPN features··································································································································· 398
Configuring DVPN in the Web interface ··················································································································· 399
Configuring a VPN domain ······························································································································· 401
Displaying VAM client information ··················································································································· 405
Configuring DVPN tunnels ································································································································· 405
Displaying DVPN session information ··············································································································· 411
Full mesh DVPN configuration example ··········································································································· 413
Hub-Spoke DVPN configuration example ········································································································· 427
Configuring DVPN at the CLI ······································································································································ 433
DVPN configuration task list ······························································································································· 433
Configuring AAA ················································································································································· 433
Configuring the VAM server ······························································································································ 433
Configuring a VAM client ·································································································································· 437
Configuring an IPsec profile ······························································································································· 439
Configuring the DVPN tunnel parameters ········································································································ 440
Configuring routing ············································································································································· 442
Displaying and maintaining DVPN ··················································································································· 443
Full mesh DVPN configuration example ··········································································································· 443
Hub-spoke DVPN configuration example ········································································································· 457
Support and other resources ·································································································································· 468
Contacting HP ······························································································································································ 468
Subscription service ············································································································································ 468
Related information ······················································································································································ 468
Documents ···························································································································································· 468
Websites ······························································································································································· 468
Conventions ·································································································································································· 469
Index ········································································································································································ 471