HP VPN Firewall Appliances VPN Configuration Guide

454
Ste
p
Command Remarks
2. Create a tunnel interface and
enter its view.
interface tunnel number
No tunnel interface is created by
default.
3. Configure a private IPv4
address for the tunnel
interface.
ip address ip-address { mask |
mask-length } [ sub ]
A tunnel interface has no private
IPv4 address configured by
default.
4. Configure the tunnel mode as
DVPN, and specify the
encapsulation mode of the
DVPN tunnel.
tunnel-protocol dvpn { gre | udp }
The two ends of a tunnel must
operate in the same tunnel mode.
5. Specify the source address or
interface of the tunnel
interface.
source { ip-address | interface-type
interface-number }
The source IP address is the IP
address of the physical interface
that sends the DVPN packets.
A tunnel interface has no source
address or interface configured by
default.
6. Bind a VAM client to the
tunnel interface.
vam client client-name
A DVPN tunnel interface must be
bound to a VAM client. Otherwise
the tunnel interface cannot come
up.
The client to be bound must exist
and has not been bound to any
other tunnel interface.
No VAM client is bound to a DVPN
tunnel interface by default.
7. Set the DVPN keepalive
interval and transmission
attempt limit.
keepalive [ seconds [ times ] ]
Optional.
The defaults are as follows:
• DVPN keepalive interval: 180
seconds.
• Transmission attempt limit: 3.
8. Set the idle timeout for the
spoke-spoke tunnel.
dvpn session idle-time time-interval
Optional.
By default, the idle timeout is 600
seconds.
9. Set the DVPN tunneling quiet
period.
dvpn session dumb-time
time-interval
Optional.
By default, the quiet period is 120
seconds.
10. Specify the network type of
the OSPF interface.
ospf network-type { broadcast |
p2mp }
Required when OSPF is used.
By default, no network type is
specified.
A DVPN tunnel can use only two
types of OSPF interfaces:
broadcast and P2MP.