R0106-HP MSR Router Series Layer 3 - IP Services Configuration Guide(V7)

362
Device Interface IP address Device Interface IP address
Tunnel2 192.168.0.2/24 GE1/0/3 192.168.30.1/24
Hub 3 GE1/0/1 1.0.0.3/24 Tunnel1 192.168.1.4/24
Tunnel1 192.168.2.1/24 Spoke 3 GE1/0/1 1.0.0.6/24
Tunnel2 192.168.0.3/24 GE1/0/2 192.168.40.1/24
AAA server 1.0.0.10/24 Tunnel1 192.168.2.2/24
Primary server GE1/0/1 1.0.0.11/24 Spoke 4 GE1/0/1 1.0.0.7/24
Secondary server GE1/0/1 1.0.0.12/24 GE1/0/2 192.168.50.1/24
GE1/0/3 192.168.60.1/24
Tunnel1 192.168.2.3/24
Configuring the primary VAM server
1. Configure IP addresses for the interfaces. (Details not shown.)
2. Configure AAA:
# Configure RADIUS scheme abc.
<PrimaryServer> system-view
[PrimaryServer] radius scheme abc
[PrimaryServer-radius-abc] primary authentication 1.0.0.10 1812
[PrimaryServer-radius-abc] primary accounting 1.0.0.10 1813
[PrimaryServer-radius-abc] key authentication simple 123
[PrimaryServer-radius-abc] key accounting simple 123
[PrimaryServer-radius-abc] user-name-format without-domain
[PrimaryServer-radius-abc] quit
[PrimaryServer] radius session-control enable
# Configure AAA methods for the ISP domain abc.
[PrimaryServer] domain abc
[PrimaryServer-isp-abc] authentication advpn radius-scheme abc
[PrimaryServer-isp-abc] accounting advpn radius-scheme abc
[PrimaryServer-isp-abc] quit
[PrimaryServer] domain default enable abc
3. Configure the VAM server:
# Create ADVPN domain abc.
[PrimaryServer] vam server advpn-domain abc id 1
# Create hub group 0.
[PrimaryServer-vam-server-domain-abc] hub-group 0
# Specify hub private addresses.
[PrimaryServer-vam-server-domain-abc-hub-group-0] hub private-address 192.168.0.1
[PrimaryServer-vam-server-domain-abc-hub-group-0] hub private-address 192.168.0.2
[PrimaryServer-vam-server-domain-abc-hub-group-0] hub private-address 192.168.0.3
[PrimaryServer-vam-server-domain-abc-hub-group-0] quit
# Create hub group 1.
[PrimaryServer-vam-server-domain-abc] hub-group 1
# Specify hub private addresses.