3Com MSR 50 Series Configuration Manual page 1580

1580 C 80: DVPN C
HAPTER ONFIGURATION
[Spoke2-ospf-200-area-0.0.0.0] quit
[Spoke2] ospf 300
[Spoke2-ospf-300] area 0
[Spoke2-ospf-300-area-0.0.0.0] network 10.0.2.4 0.0.0.255
[Spoke2-ospf-300-area-0.0.0.0] quit
7 Configure Spoke 3
Configure the IP addresses of the interfaces. (Omitted)
■
Configure the VAM clients
■
<Spoke3> system-view
# Create a VAM client named dvpn2spoke3 for VPN 2.
[Spoke3] vam client name dvpn2spoke3
[Spoke3-vam-client-name-dvpn2spoke3] vpn 2
# Specify the IP addresses of the VAM servers and set the pre-shared key.
[Spoke3-vam-client-name-dvpn2spoke3] server primary ip-address 192.168.1.22
[Spoke3-vam-client-name-dvpn2spoke3] server secondary ip-address 192.168.1.33
[Spoke3-vam-client-name-dvpn2spoke3] pre-shared-key simple 123
# Create a local user named dvpn2spoke3, setting the password as dvpn2spoke3.
[Spoke3-vam-client-name-dvpn2spoke3] user dvpn2spoke3 password simple dvpn2spoke3
[Spoke3-vam-client-name-dvpn2spoke3] client enable
[Spoke3-vam-client-name-dvpn2spoke3] quit
Configure the IPSec profile
■
# Configure the IPSec proposal.
[Spoke3] ipsec proposal vam
[Spoke3-ipsec-proposal-vam] encapsulation-mode tunnel
[Spoke3-ipsec-proposal-vam] transform esp
[Spoke3-ipsec-proposal-vam] esp encryption-algorithm des
[Spoke3-ipsec-proposal-vam] esp authentication-algorithm sha1
[Spoke3-ipsec-proposal-vam] quit
# Configure the IKE peer.
[Spoke3] ike peer vam
[Spoke3-ike-peer-vam] pre-shared-key abcde
[Spoke3-ike-peer-vam] quit
# Configure the IPSec profile.
[Spoke3] ipsec profile vamp
[Spoke3-ipsec-profile-vamp] proposal vam
[Spoke3-ipsec-profile-vamp] ike-peer vam
[Spoke3-ipsec-profile-vamp] sa duration time-based 600
[Spoke3-ipsec-profile-vamp] pfs dh-group2
Configure the DVPN tunnels
■
# Configure tunnel interface Tunnel 2 for VPN 2.
[Spoke3] interface tunnel 2
[Spoke3-Tunnel2] tunnel-protocol dvpn udp
[Spoke3-Tunnel2] vam client dvpn2spoke3
[Spoke3-Tunnel2] ip address 10.0.2.3 255.255.255.0
[Spoke3-Tunnel2] source ethernet 1/0
[Spoke3-Tunnel2] ospf network-type broadcast