R3303-HP HSR6800 Routers Layer 3 - IP Services Configuration Guide

x
Configuration procedure ···································································································································· 280
Configuration example for backing up a P2MP GRE tunnel at the headquarters ················································ 282
Network requirements ········································································································································· 282
Configuration procedure ···································································································································· 283
Configuration example for backing up a P2MP GRE tunnel at a branch ······························································ 286
Network requirements ········································································································································· 286
Configuration procedure ···································································································································· 286
Configuring DVPN ·················································································································································· 289
Overview ······································································································································································· 289
Basic concepts ····················································································································································· 289
How DVPN operates ··········································································································································· 289
Network structures ··············································································································································· 290
DVPN implementation ········································································································································· 291
Supported DVPN features··································································································································· 293
DVPN configuration task list ······································································································································· 294
Configuring AAA ························································································································································· 295
Configuring the VAM server ······································································································································· 295
Creating a VPN domain ····································································································································· 295
Enabling VAM server ·········································································································································· 295
Configuring the listening IP address and UDP port number ··········································································· 296
Configuring the security parameters of VAM protocol packets ····································································· 296
Specifying the client authentication mode ········································································································ 296
Specifying a hub ················································································································································· 297
Configuring the pre-shared key of the VAM server ························································································· 297
Configuring keepalive parameters ···················································································································· 298
Configuring a VAM client ··········································································································································· 298
Creating a VAM client ········································································································································ 299
Setting the VAM protocol packet retransmission interval ················································································ 299
Specifying the primary VAM server ·················································································································· 299
Specifying the secondary VAM server ·············································································································· 299
Configuring the username and password ········································································································ 300
Specifying the VPN domain of the VAM client ································································································ 300
Specifying the pre-shared key of the VAM client ····························································································· 300
Enabling VAM client ··········································································································································· 300
Configuring an IPsec profile ······································································································································· 301
Configuration guidelines ···································································································································· 301
Configuration prerequisites ································································································································ 301
Configuration procedure ···································································································································· 301
Configuring DVPN tunnel parameters ······················································································································· 302
Configuration guidelines ···································································································································· 302
Configuration prerequisites ································································································································ 303
Configuration procedure ···································································································································· 303
Configuring routing ······················································································································································ 305
Displaying and maintaining DVPN ···························································································································· 305
Full mesh DVPN configuration example ···················································································································· 306
Hub-spoke DVPN configuration example ·················································································································· 320
Support and other resources ·································································································································· 331
Contacting HP ······························································································································································ 331
Subscription service ············································································································································ 331
Related information ······················································································································································ 331
Documents ···························································································································································· 331
Websites ······························································································································································· 331
Conventions ·································································································································································· 332