3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide

224 CHAPTER 13: DVPN

# Configure aggregation of two GigabitEthernet interfaces of the IPsec module

(IPsec module slot number is 2).

[SW8800] secblade aggregation slot 2

# Create the SecBlade test.

[SW8800] secblade test

# Specify the SecBlade interface VLAN.

[3Com-secblade-test] secblade-interface vlan-interface 80

# Set the protected VLAN.

[3Com-secblade-test] security-vlan 90

# Map the IPsec module to the IPsec module of the specified slot.

[3Com-secblade-test] map to slot 2

[3Com-secblade-test] quit

[SW8800] quit

# Log into the IPsec module of the specified slot.

<SW8800> secblade slot 2 (Both user name and password are SecBlade)

user: SecBlade

password: SecBlade

<secblade_Srv> system

# Create the sub-interface.

[secblade_Srv] interface g0/0.1

[secblade_Srv-GigabitEthernet0/0.1] vlan-type dot1q vid 80

[secblade_Srv-GigabitEthernet0/0.1] ip address 80.0.0.254 24

[secblade_Srv-GigabitEthernet0/0.1] quit

[secblade_Srv] interface g0/0.2

[secblade_Srv-GigabitEthernet0/0.2] vlan-type dot1q vid 90

[secblade_Srv-GigabitEthernet0/0.2] ip address 90.0.0.254 24

[secblade_Srv-GigabitEthernet0/0.2] quit

# Configure a static route.

[secblade_Srv] ip route-static 70.0.0.0 24 80.0.0.1

# Enable DVPN function.

[secblade_Srv] dvpn service enable

# Create a DVPN policy and configure IPsec algorithm-suite as 5.

[secblade_Srv] dvpn policy 1

[secblade_Srv-dvpn-policy-1] data algorithm-suite 5

# Configure Tunnel 0 interface.