HP FlexNetwork MSR2003 Configuration Manual page 379

Figure 148 Network diagram
Hub1
Tunnel1
IP network
Tunnel1
Spoke1
Site 1
Table 14 Interface and IP address assignment
Device
Hub 1
Hub 2
AAA server
Primary server
Secondary server
Configuring the primary VAM server
1. Configure IP addresses for the interfaces. (Details not shown.)
2. Configure AAA:
# Configure RADIUS scheme abc.
<PrimaryServer> system-view
[PrimaryServer] radius scheme abc
[PrimaryServer-radius-abc] primary authentication 1.0.0.10 1812
[PrimaryServer-radius-abc] primary accounting 1.0.0.10 1813
[PrimaryServer-radius-abc] key authentication simple 123
[PrimaryServer-radius-abc] key accounting simple 123
[PrimaryServer-radius-abc] user-name-format without-domain
[PrimaryServer-radius-abc] quit
[PrimaryServer] radius session-control enable
# Configure AAA methods for ISP domain abc.
[PrimaryServer] domain abc
[PrimaryServer-isp-abc] authentication advpn radius-scheme abc
[PrimaryServer-isp-abc] accounting advpn radius-scheme abc
GE2/0/1 GE2/0/1
GE2/0/1 GE2/0/1
GE2/0/2 GE2/0/2
Interface IP address
GE2/0/1 1.0.0.1/24
Tunnel1 192.168.0.1/24
GE2/0/1 1.0.0.2/24
Tunnel1 192.168.0.2/24
1.0.0.10/24
GE2/0/1 1.0.0.11/24
GE2/0/1 1.0.0.12/24
Hub2
Tunnel1
Tunnel1
Spoke2
Hub-to-Hub static tunnel
Site 2
Hub-to-Spoke static tunnel
Device
Spoke 1
Spoke 2
365
AAA server
GE2/0/1
Primary server
GE2/0/1
Secondary server
Interface IP address
GE2/0/1 1.0.0.3/24
GE2/0/2 192.168.1.1/24
Tunnel1 192.168.0.3/24
GE2/0/1 1.0.0.4/24
GE2/0/2 192.168.2.1/24
Tunnel1 192.168.0.4/24