HP VPN Firewall Appliances VPN Configuration Guide

446
Configuring DVPN at the CLI
DVPN configuration task list
When configuring DVPN, perform configuration in this order: the VAM server, the hubs, the spokes.
Complete the following tasks to configure DVPN:
Task Remarks
Server side configuration
Configuring AAA Optional.
Configuring the VAM server Required.
Client side configuration
Configuring a VAM client Required.
Configuring an IPsec profile Optional.
Configuring DVPN tunnel parameters Required.
Configuring routing Required.
Configuring AAA
A VAM server can employ AAA to authenticate the identities of clients accessing a VPN domain. For
AAA configuration, see Security Configuration Guide.
Configuring the VAM server
Complete the following tasks to configure a VAM server:
Task Remarks
Creating a VPN domain Required.
Enabling VAM server Required.
Configuring the listening IP address and UDP port number Optional.
Configuring security parameters for VAM protocol packets Optional.
Specifying the client authentication mode Optional.
Specifying a hub Required.
Configuring the pre-shared key of the VAM server Required.
Configuring keepalive parameters Optional.
Creating a VPN domain
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Create a VPN domain and
enter VPN domain view.
vam server vpn vpn-name No VPN domain exists by default.