Operation Of Dvpn - 3Com 3C13636 Configuration Manual

Router 3000 ethernet family

Hide thumbs Also See for 3C13636:

Table of Contents

3Com Router 3000 Ethernet Family

Configuration Guide

4.1.3 Operation of DVPN

Each DVPN access device in a DVPN domain runs the proprietary DVPN protocol. The

DVPN server holds information about all registered clients, and each client holds

information about all sessions it has established, including the private IP address of the

destination device (the IP address of the tunnel interface), the public IP address of the

destination device (the IP address of the WAN interface), the UDP port of the

destination device (when employing UDP), and the status of the session.

The following is a brief description of the interactive operations between the server and

a client in three phases.

I. Registration phase

For a client with the interface properties and server address configured, when its

interfaces come up, it registers with the server, completing processes including

registration, and policy issuing.

During the registration phase, a map is created between the client and the server. All

the activities in this phase depend on the map. Throughout the lifetime of the client, the

client and the server hold a corresponding map respectively; the maps are removed

only when the client exits the DVPN domain. Once a map is removed, the client

releases all resources that it occupies (including all sessions) and goes back to the

initial state.

Figure 4-1 demonstrates the registration procedure. Any error coming forth during the

procedure can terminate the procedure and put the client back to the initial state.

Figure 4-1 DVPN registration procedure

The client sends an algorithm negotiation request message to the server.

The server sends an algorithm negotiation response message to the client.

negotiation, key

negotiation,

3Com Corporation

authentication

Chapter 4 DVPN

Table of Contents

3c13636-us - router 3036 3000 series