R0106-HP MSR Router Series Layer 3 - IP Services Configuration Guide(V7)

ManualsBrandsHP ManualsNetwork HardwareHP MSR3024 TAA-compliant AC Router

Analysis ································································································································································ 297

Solution ································································································································································· 297

Configuring GRE ····················································································································································· 298

Overview ······································································································································································· 298

GRE encapsulation format ·································································································································· 298

GRE tunnel operating principle ·························································································································· 298

GRE security mechanisms ··································································································································· 299

GRE application scenarios ································································································································· 299

Protocols and standards ····································································································································· 301

Configuring a GRE over IPv4 tunnel ·························································································································· 302

Configuring a GRE over IPv6 tunnel ·························································································································· 304

Displaying and maintaining GRE ······························································································································· 305

GRE configuration examples ······································································································································ 306

GRE over IPv4 tunnel configuration example ··································································································· 306

GRE over IPv6 tunnel configuration example ··································································································· 308

Troubleshooting GRE ··················································································································································· 311

Symptom ······························································································································································· 311

Configuring ADVPN ··············································································································································· 312

ADVPN structures ················································································································································ 312

How ADVPN operates ········································································································································ 314

ADVPN configuration task list ····································································································································· 317

Configuring AAA ························································································································································· 317

Configuring the VAM server ······································································································································· 317

Creating an ADVPN domain ····························································································································· 318

Enabling the VAM server ···································································································································· 318

Configuring a pre-shared key for the VAM server ··························································································· 318

Configuring hub groups ····································································································································· 319

Configuring the port number of the VAM server ····························································································· 321

Specifying authentication and encryption algorithms for the VAM server ···················································· 321

Configuring an authentication method ············································································································· 322

Configuring keepalive parameters ···················································································································· 322

Configuring the retry timer ································································································································· 323

Configuring the VAM client ········································································································································ 323

Creating a VAM client ········································································································································ 323

Enabling VAM clients ·········································································································································· 323

Specifying VAM servers ····································································································································· 324

Specifying an ADVPN domain for a VAM client ····························································································· 324

Specifying a pre-shared key for a VAM client ································································································· 324

Setting the retry timer and retry times for a VAM client ·················································································· 325

Setting the dumb timer for a VAM client··········································································································· 325

Configuring a username and password for a VAM client ·············································································· 325

Configuring an ADVPN tunnel interface ··················································································································· 326

Configuring routing ······················································································································································ 328

Configuring IPsec for ADVPN tunnels ························································································································ 328

Displaying and maintaining ADVPN ························································································································· 328

ADVPN configuration examples ································································································································· 329

IPv4 full-mesh ADVPN configuration example ································································································· 329

IPv6 full-mesh ADVPN configuration example ································································································· 337

IPv4 hub-spoke ADVPN configuration example ······························································································· 345

IPv6 hub-spoke ADVPN configuration example ······························································································· 353