R0106-HP MSR Router Series Layer 3 - IP Services Configuration Guide(V7)

324
Ste
p
Command Remarks
2. Enable VAM clients.
• Enable one or all VAM clients:
vam client enable { all | name
client-name }
• Enable a VAM client:
a. vam client name client-name
b. client enable
Use either method.
By default, no VAM client is
enabled.
Specifying VAM servers
You can specify a primary VAM server and a secondary VAM server for a VAM client. The client registers
with both servers, and accepts settings from the server that first registers the client. When the server fails,
the client uses the settings from the other server.
If the specified primary and secondary VAM servers have the same address or name, only the primary
VAM server takes effect.
The port number of a VAM server must be the same as that configured on the VAM server.
To specify VAM servers for a client:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter VAM client view.
vam client name client-name N/A
3. Specify the primary VAM
server.
server primary { name host-name |
ip-address ip-address |
ipv6-address ipv6-address } [ port
port-number ]
By default, no VAM server is
specified.
4. (Optional.) Specify the
secondary VAM server.
server secondary { name
host-name | ip-address ip-address
| ipv6-address ipv6-address }
[ port port-number ]
By default, no VAM server is
specified.
Specifying an ADVPN domain for a VAM client
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter VAM client view.
vam client name client-name N/A
3. Specify an ADVPN domain for
the VAM client.
advpn-domain domain-name
By default, no ADVPN domain is
specified for a VAM client.
Specifying a pre-shared key for a VAM client
The pre-shared key is used to generate initial encryption and authentication keys during connection
initialization. It is also used to generate encryption and authentication keys for subsequent packets if
encryption and authentication are needed.