3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide
PKI Displaying and Debugging Commands 459
Description
Use the dvpn policy command to apply a specified DVPN policy to a tunnel
interface that is of server type.
Use the undo dvpn policy command to disable a DVPN policy applied to a tunnel
interface.
A tunnel interface can have only one DVPN policy applied to it. Therefore, to apply
another DVPN policy, you must disable the existing one first. You can apply a
DVPN policy to multiple tunnel interfaces.
You can execute the dvpn-policy command only when the tunnel interface is of
server type.
A tunnel interface does not have a DVPN policy applied to it by default.
Related command: dvpn interface-type.
Example
# Apply the DVPN policy with a name of abc to the tunnel interface.
[SecBlade_VPN-Tunnel0] dvpn interface-type server
[SecBlade_VPN-Tunnel0] dvpn policy abc
dvpn register-type Syntax
dvpn register-type { forward | undistributed } *
undo dvpn register-type { forward | undistributed } *
View
Tunnel interface views
Parameter
forward: Specifies the DVPN server to forward all packets sourced from the client.
undistributed: Specifies the DVPN server not to distribute registration
information about the client to other clients.
Description
Use the dvpn register-type command to configure the type of the additional
information when a client registers with a DVPN server.
Use the undo dvpn register-type command to remove the configuration.
The DVPN server determines whether or not to send redirecting packets according
to the type of the additional information.
If the additional information is of forward type, the client can establish no session
with any other clients in the DVPN domain. If the additional information is of
undistributed type, the DVPN server notifies no client in the DVPN domain of the
redirecting packets about the client. (But the DVPN server still notifies the client of
redirecting packets about other clients. So the client can still establish sessions
with other clients.)