R3303-HP 6600/HSR6600 Routers Layer 3 - IP Services Configuration Guide

x
Configuration procedure ···································································································································· 279
Configuration example for backing up a P2MP GRE tunnel at the headquarters ················································ 281
Network requirements ········································································································································· 281
Configuration procedure ···································································································································· 282
Configuration example for backing up a P2MP GRE tunnel at a branch ······························································ 285
Network requirements ········································································································································· 285
Configuration procedure ···································································································································· 285
Configuring DVPN ·················································································································································· 288
Overview ······································································································································································· 288
Basic concepts ····················································································································································· 288
How DVPN operates ··········································································································································· 288
Network structures ··············································································································································· 289
DVPN implementation ········································································································································· 290
Supported DVPN features··································································································································· 292
DVPN configuration task list ······································································································································· 293
Configuring AAA ························································································································································· 294
Configuring the VAM server ······································································································································· 294
Creating a VPN domain ····································································································································· 294
Enabling VAM server ·········································································································································· 294
Configuring the listening IP address and UDP port number ··········································································· 295
Configuring the security parameters of VAM protocol packets ····································································· 295
Specifying the client authentication mode ········································································································ 295
Specifying a hub ················································································································································· 296
Configuring the pre-shared key of the VAM server ························································································· 296
Configuring keepalive parameters ···················································································································· 297
Configuring a VAM client ··········································································································································· 297
Creating a VAM client ········································································································································ 298
Setting the VAM protocol packet retransmission interval ················································································ 298
Specifying the primary VAM server ·················································································································· 298
Specifying the secondary VAM server ·············································································································· 298
Configuring the username and password ········································································································ 299
Specifying the VPN domain of the VAM client ································································································ 299
Specifying the pre-shared key of the VAM client ····························································································· 299
Enabling VAM client ··········································································································································· 299
Configuring an IPsec profile ······································································································································· 300
Configuration guidelines ···································································································································· 300
Configuration prerequisites ································································································································ 300
Configuration procedure ···································································································································· 300
Configuring DVPN tunnel parameters ······················································································································· 301
Configuration guidelines ···································································································································· 301
Configuration prerequisites ································································································································ 302
Configuration procedure ···································································································································· 302
Configuring routing ······················································································································································ 304
Displaying and maintaining DVPN ···························································································································· 304
Full mesh DVPN configuration example ···················································································································· 305
Hub-spoke DVPN configuration example ·················································································································· 319
Support and other resources ·································································································································· 330
Contacting HP ······························································································································································ 330
Subscription service ············································································································································ 330
Related information ······················································································································································ 330
Documents ···························································································································································· 330
Websites ······························································································································································· 330
Conventions ·································································································································································· 331