R3303-HP HSR6800 Routers Layer 3 - IP Services Configuration Guide

295
Configuring AAA
A VAM server can employ AAA to authenticate the identities of clients accessing a VPN domain. For
AAA configuration, see Security Configuration Guide.
Configuring the VAM server
Complete the following tasks to configure a VAM server:
Task Remarks
Creating a VPN domain Required.
Enabling VAM server Required.
Configuring the listening IP address and UDP port number Optional.
Configuring the security parameters of VAM protocol packets Optional.
Specifying the client authentication mode Optional.
Specifying a hub Required.
Configuring the pre-shared key of the VAM server Required.
Configuring keepalive parameters Optional.
Creating a VPN domain
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Create a VPN domain and
enter VPN domain view.
vam server vpn vpn-name No VPN domain exists by default.
Enabling VAM server
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enable VAM server.
• (Approach 1) Enable VAM server for one or
all VPN domains:
vam server enable { all | vpn vpn-name }
• (Approach 2) Enable VAM server for a VPN
domain:
a. vam server vpn vpn-name
b. server enable
Use either approach.
By default, VAM server is
disabled.