3Com MSR 50 Series Configuration Manual page 1583

[MainServer-isp-domain1] quit
[MainServer] domain default enable domain1
Configure the VAM server
■
# Specify the listening IP address of the server.
[MainServer] vam server ip-address 192.168.1.22
# Create VPN domain 1.
[MainServer] vam server vpn 1
# Set the pre-shared key to 123.
[MainServer-vam-server-vpn-1] pre-shared-key simple 123
# Set VAM client authentication mode to CHAP.
[MainServer-vam-server-vpn-1] authentication-method chap
# Specify the IP address of the Hubs for VPN 1.
[MainServer-vam-server-vpn-1] hub private-ip 10.0.1.1
[MainServer-vam-server-vpn-1] hub private-ip 10.0.1.2
# Enable VAM server for all VPNs.
[MainServer] vam server enable all
2 Configure the secondary VAM server (the Backup server in the figure)
Except for the listening IP address, the configurations for the secondary VAM
server are the same as those for the primary VAM server. Refer to
primary VAM server" on page
3 Configure Hub 1
Configure the IP addresses of the interfaces (Omitted)
■
Configure the VAM clients
■
<Hub1> system-view
# Create a VAM client named dvpn1hub1 for VPN 1.
[Hub1] vam client name dvpn1hub1
[Hub1-vam-client-name-dvpn1hub1] vpn 1
# Specify the IP addresses of the VAM servers and set the pre-shared key.
[Hub1-vam-client-name-dvpn1hub1] server primary ip-address 192.168.1.22
[Hub1-vam-client-name-dvpn1hub1] server secondary ip-address 192.168.1.33
[Hub1-vam-client-name-dvpn1hub1] pre-shared-key simple 123
# Create a local user named dvpn1hub1, setting the password as dvpn1hub1.
[Hub1-vam-client-name-dvpn1hub1] user dvpn1hub1 password simple dvpn1hub1
[Hub1-vam-client-name-dvpn1hub1] client enable
[Hub1-vam-client-name-dvpn1hub1] quit
Configure the IPSec profile
■
# Configure the IPSec proposal.
[Hub1] ipsec proposal vam
[Hub1-ipsec -proposal-vam] encapsulation-mode tunnel
[Hub1-ipsec -proposal-vam] transform esp
[Hub1-ipsec -proposal-vam] esp encryption-algorithm des
[Hub1-ipsec -proposal-vam] esp authentication-algorithm sha1
[Hub1-ipsec -proposal-vam] quit
# Configure the IKE peer.
DVPN Configuration Example
1582.
1583
"Configure the