R2511-HP MSR Router Series Layer 3 - IP Services Configuration Guide(V5)
vi
Solution ································································································································································· 139
Symptom 2 ··························································································································································· 139
Solution ································································································································································· 139
Configuring NAT-PT ················································································································································ 140
Overview ······································································································································································· 140
Basic concepts ····················································································································································· 140
Implementing NAT-PT ·········································································································································· 141
NAT-PT limitations ··············································································································································· 142
Protocols and standards ····································································································································· 142
NAT-PT configuration task list ····································································································································· 143
Configuration prerequisites ········································································································································· 143
Enabling NAT-PT ·························································································································································· 144
Configuring a NAT-PT prefix ······································································································································ 144
Configuring IPv4/IPv6 address mappings on the IPv6 side ···················································································· 144
Configuring a static mapping on the IPv6 side ································································································ 144
Configuring a dynamic mapping policy on the IPv6 side ·············································································· 145
Configuring IPv4/IPv6 address mappings on the IPv4 side ···················································································· 146
Configuring a static mapping on the IPv4 side ································································································ 146
Configuring a dynamic mapping policy on the IPv4 side ·············································································· 147
Setting the ToS field after NAT-PT translation ··········································································································· 147
Setting the traffic class field after NAT-PT translation ······························································································· 147
Configuring static NAPT-PT mappings of IPv6 servers ····························································································· 148
Configuring a NAT-PT session aging time for a protocol ························································································ 148
Configuring the maximum number of sessions ········································································································· 149
Displaying and maintaining NAT-PT ·························································································································· 149
NAT-PT configuration examples ································································································································· 150
Configuring dynamic mapping on the IPv6 side ····························································································· 150
Configuring static mappings on the IPv4 side and the IPv6 side ··································································· 151
Troubleshooting NAT-PT ·············································································································································· 153
Symptom ······························································································································································· 153
Solution ································································································································································· 153
Configuring DVPN ·················································································································································· 154
Overview ······································································································································································· 154
Basic concepts ····················································································································································· 154
How DVPN operates ··········································································································································· 154
Network structures ··············································································································································· 155
DVPN implementation ········································································································································· 156
Supported DVPN features··································································································································· 158
DVPN configuration task list ······································································································································· 159
Configuring AAA ························································································································································· 159
Configuring the VAM server ······································································································································· 160
Creating a VPN domain ····································································································································· 160
Enabling VAM server ·········································································································································· 160
Configuring the listening IP address and UDP port number ··········································································· 160
Configuring the security parameters of VAM protocol packets ····································································· 161
Specifying the client authentication mode ········································································································ 161
Specifying a hub ················································································································································· 162
Configuring the pre-shared key of the VAM server ························································································· 162
Configuring keepalive parameters ···················································································································· 163
Configuring a VAM client ··········································································································································· 163
Creating a VAM client ········································································································································ 164
Setting the VAM protocol packet retransmission interval ················································································ 164
Specifying the primary VAM server ·················································································································· 164