R0106-HP MSR Router Series Layer 3 - IP Services Configuration Guide(V7)

328
Configuring routing
ADVPN supports OSPF, RIP, and BGP for IPv4:
• When OSPF is used, set the network type of an OSPF interface to broadcast in a full mesh network
and to P2MP in a hub-spoke network.
• When RIP is used, you can use RIP-1 or RIP-2 broadcast in a full mesh network and use RIP-2 multicast
and disable split horizon in a hub-spoke network.
• When BGP is used, configure a routing policy to make sure the next hop of a route destined for a
remote private network is the IP address of the peer spoke in a full mesh network (EBGP does not
support full-mesh), or is the IP address of the hub in a hub-spoke network.
ADVPN supports OSPFv3, RIPng, and IPv6 BGP for IPv6:
• When OSPFv3 is used, set the network type of an OSPFv3 interface to broadcast in a full mesh
network and to P2MP in a hub-spoke network.
• When RIPng is used, only the full-mesh network is supported.
• When IPv6 BGP is used, configure a routing policy to make sure the next hop of a route destined
for a remote private network is the IP address of the peer spoke in a full mesh network (EBGP does
not support full-mesh), or is the IP address of the hub in a hub-spoke network.
For more information about routing protocols and policies, see Layer 3—IP Routing Configuration Guide.
Configuring IPsec for ADVPN tunnels
You can configure an IPsec profile to secure ADVPN tunnels:
1. Configure IPsec proposals.
2. Configure an IKE-mode IPsec profile that references the IPsec proposals.
3. Apply the IPsec profile to an ADVPN tunnel interface.
For more information about IPsec configuration, see Security Configuration Guide.
Displaying and maintaining ADVPN
Execute display commands in any view and reset commands in user view.
Task Command
Display IPv4 private-to-public
address mappings for VAM clients
registered on the VAM server.
display vam server address-map [ advpn-domain domain-name
[ private-address private-ip-address ] ] [ verbose ]
Display IPv6 private-to-public
address mappings for VAM clients
registered on the VAM server.
display vam server ipv6 address-map [ advpn-domain domain-name
[ private-address private-ipv6-address ] ] [ verbose ]
Display IPv4 private networks for
VAM clients registered on the VAM
server.
display vam server private-network [ advpn-domain domain-name
[ private-address private-ip-address ] ]
Display IPv6 private networks for
VAM clients registered on the VAM
server.
display vam server ipv6 private-network [ advpn-domain domain-name
[ private-address private-ipv6-address ] ]