R0106-HP MSR Router Series Layer 3 - IP Services Configuration Guide(V7)

367
[Hub2-Tunnel1] undo shutdown
[Hub2-Tunnel1] quit
Configuring Hub 3
1. Configure IP addresses for the interfaces. (Details not shown.)
2. Configure the VAM client:
# Create VAM client Hub3Group0.
<Hub3> system-view
[Hub3] vam client name Hub3Group0
# Specify ADVPN domain abc for the VAM Client.
[Hub3-vam-client-Hub3Group0] advpn-domain abc
# Set pre-shared key 123456 for the VAM client.
[Hub3-vam-client-Hub3Group0] pre-shared-key simple 123456
# Set the username and password to hub3.
[Hub3-vam-client-Hub3Group0] user hub3 password simple hub3
# Specify the primary and secondary VAM servers.
[Hub2-vam-client-Hub2Group0] server primary ip-address 1.0.0.11
[Hub2-vam-client-Hub2Group0] server secondary ip-address 1.0.0.12
# Enable the VAM client.
[Hub2-vam-client-Hub2Group0] client enable
[Hub2-vam-client-Hub2Group0] quit
# Create VAM client Hub3Group1.
[Hub3] vam client name Hub3Group1
# Specify ADVPN domain abc for the VAM Client.
[Hub3-vam-client-Hub3Group1] advpn-domain abc
# Set pre-shared key 123456 for the VAM client.
[Hub3-vam-client-Hub3Group1] pre-shared-key simple 123456
# Set the username and password to hub3.
[Hub3-vam-client-Hub3Group1] user hub3 password simple hub3
# Specify the primary and secondary VAM servers.
[Hub3-vam-client-Hub3Group1] server primary ip-address 1.0.0.11
[Hub3-vam-client-Hub3Group1] server secondary ip-address 1.0.0.12
# Enable the VAM client.
[Hub2-vam-client-Hub2Group1] client enable
[Hub2-vam-client-Hub2Group1] quit
3. Configure the IPsec profile:
# Configure IKE.
[Hub3] ike keychain abc
[Hub3-ike-keychain-abc] pre-shared-key address 0.0.0.0 0.0.0.0 key simple 123456
[Hub3-ike-keychain-abc] quit
[Hub3] ike profile abc
[Hub3-ike-profile-abc] keychain abc
[Hub3-ike-profile-abc] quit
# Configure the IPsec profile.
[Hub3] ipsec transform-set abc