3Com MSR 50 Series Configuration Manual page 1575

[Hub1-Tunnel1] ipsec profile vamp
[Hub1-Tunnel1] quit
# Configure a tunnel interface Tunnel 2 for VPN 2.
[Hub1] interface tunnel 2
[Hub1-Tunnel2] tunnel-protocol dvpn udp
[Hub1-Tunnel2] vam client dvpn2hub1
[Hub1-Tunnel2] ip address 10.0.2.1 255.255.255.0
[Hub1-Tunnel2] source ethernet 1/0
[Hub1-Tunnel2] ospf network-type broadcast
[Hub1-Tunnel2] ipsec profile vamp
[Hub1-Tunnel2] quit
Configure OSPF
■
# Configure OSPF for the public network.
[Hub1] ospf 100
[Hub1-ospf-100] area 0
[Hub1-ospf-100-area-0.0.0.0] network 192.168.1.1 0.0.0.255
[Hub1-ospf-100-area-0.0.0.0] quit
# Configure OSPF for the private networks.
[Hub1] ospf 200
[Hub1-ospf-200] area 0
[Hub1-ospf-200-area-0.0.0.0] network 10.0.1.1 0.0.0.255
[Hub1-ospf-200-area-0.0.0.0] quit
[Hub1] ospf 300
[Hub1-ospf-300] area 0
[Hub1-ospf-300-area-0.0.0.0] network 10.0.2.1 0.0.0.255
[Hub1-ospf-300-area-0.0.0.0] quit
4 Configure Hub 2
Configure IP addresses for the interfaces (omitted).
■
Configure the VAM clients.
■
<Hub2> system-view
# Create a VAM client named dvpn1hub2 for VPN 1.
[Hub2] vam client name dvpn1hub2
[Hub2-vam-client-name-dvpn1hub2] vpn 1
# Specify the VAM servers and set the pre-shared key for the VAM client.
[Hub2-vam-client-name-dvpn1hub2] server primary ip-address 192.168.1.22
[Hub2-vam-client-name-dvpn1hub2] server secondary ip-address 192.168.1.33
[Hub2-vam-client-name-dvpn1hub2] pre-shared-key simple 123
# Create a local user, setting the user name to dvpn1hub2 and the password to
dvpn1hub2.
[Hub2-vam-client-name-dvpn1hub2] user dvpn1hub2 password simple dvpn1hub2
[Hub2-vam-client-name-dvpn1hub2] client enable
[Hub2-vam-client-name-dvpn1hub2] quit
# Create a VAM client named dvpn2hub2 for VPN2.
[Hub2] vam client name dvpn2hub2
[Hub2-vam-client-name-dvpn2hub2] vpn 2
# Specify the VAM servers and set the pre-shared key for the VAM client.
DVPN Configuration Example 1575