R3102-R3103-HP 6600/HSR6600 Routers Layer 3 - IP Services Configuration Guide

x
Configuration procedure ···································································································································· 278
Configuration example for backing up a P2MP GRE tunnel at the headquarters ················································ 280
Network requirements ········································································································································· 280
Configuration procedure ···································································································································· 281
Configuration example for backing up a P2MP GRE tunnel at a branch ······························································ 284
Network requirements ········································································································································· 284
Configuration procedure ···································································································································· 284
Configuring DVPN ·················································································································································· 287
Overview ······································································································································································· 287
Basic concepts ····················································································································································· 287
How DVPN operates ··········································································································································· 287
Network structures ··············································································································································· 288
DVPN implementation ········································································································································· 289
Supported DVPN features··································································································································· 291
DVPN configuration task list ······································································································································· 292
Configuring AAA ························································································································································· 293
Configuring the VAM server ······································································································································· 293
Creating a VPN domain ····································································································································· 293
Enabling VAM server ·········································································································································· 293
Configuring the listening IP address and UDP port number ··········································································· 294
Configuring the security parameters of VAM protocol packets ····································································· 294
Specifying the client authentication mode ········································································································ 295
Specifying a hub ················································································································································· 295
Configuring the pre-shared key of the VAM server ························································································· 295
Configuring keepalive parameters ···················································································································· 296
Configuring a VAM client ··········································································································································· 296
Creating a VAM client ········································································································································ 297
Setting the VAM protocol packet retransmission interval ················································································ 297
Specifying the primary VAM server ·················································································································· 297
Specifying the secondary VAM server ·············································································································· 297
Configuring the username and password ········································································································ 298
Specifying the VPN domain of the VAM client ································································································ 298
Specifying the pre-shared key of the VAM client ····························································································· 298
Enabling VAM client ··········································································································································· 299
Configuring an IPsec profile ······································································································································· 299
Configuration guidelines ···································································································································· 299
Configuration prerequisites ································································································································ 299
Configuration procedure ···································································································································· 299
Configuring DVPN tunnel parameters ······················································································································· 300
Configuration guidelines ···································································································································· 300
Configuration prerequisites ································································································································ 301
Configuration procedure ···································································································································· 301
Configuring routing ······················································································································································ 303
Displaying and maintaining DVPN ···························································································································· 303
Full mesh DVPN configuration example ···················································································································· 304
Hub-spoke DVPN configuration example ·················································································································· 318
Support and other resources ·································································································································· 329
Contacting HP ······························································································································································ 329
Subscription service ············································································································································ 329
Related information ······················································································································································ 329
Documents ···························································································································································· 329
Websites ······························································································································································· 329
Conventions ·································································································································································· 330