3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide

PKI Displaying and Debugging Commands 461
View
Tunnel interface views
Parameter
dvpn-class-name: Name of the DVPN class to be applied to the tunnel interface. A
DVPN class is a data structure that contains information such as the public IP
address of the DVPN server side of a tunnel interface, private IP address, user
name and password. You can create a DVPN class by executing the dvpn class
command in system view.
Description
Use the dvpn server command to configure the DVPN class to be applied to a
tunnel interface.
Use the undo dvpn server command to disable the DVPN class applied to a
tunnel interface.
At present, a tunnel interface can be the DVPN server of only one DVPN domain,
and a DVPN class can only be applied to one tunnel interface at same time.
A tunnel interface is not configured with a DVPN class by default.
Example
# Apply the DVPN class with a name of abc to the tunnel interface.
[SecBlade_VPN-Tunnel0] dvpn server abc
Syntax
dvpn server authentication-client method { chap | none | pap }
View
System view
Parameter
none: Specifies not to authenticate clients.
pap: Specifies to authenticate clients using PAP (password authentication
protocol).
chap: Specifies to authenticate clients using CHAP (challenge authentication
protocol).
Description
Use the dvpn server authentication-client method command to specify the
default way a DVPN server authenticates clients. If the DVPN domain to be
accessed is not specified when a client registers with a DVPN server, the DVPN
server authenticates the client in the default way. CHAP and PAP are available for
authentication at present.
A DVPN server determines the way to authenticate clients according to the policy
applied to the DVPN domain. If the policy does not exist, the DVPN adopts the one
in global configuration to authenticate clients.