Configuring A Dvpn Server (Basic Configuration) - 3Com 3C13636 Configuration Manual

3Com Router 3000 Ethernet Family
Configuration Guide
Enabling/disabling DVPN
Configuring the pre-shared key (optional)
Configuring the map aging time
Configuring how to authenticate a client
Configuring a local user for a client (optional)
Configure a service for the user to use (optional)
2) Tunnel interface configuration
Tunnel interface configuration tasks are described in the following sections:
Configuring the encapsulation format
Configuring the type of the tunnel interface
Configuring the DVPN domain to which the tunnel interface belongs
Configuring the source address of the tunnel interface
Configuring the data stream to be encrypted using IPSec
Applying the DVPN policy to the tunnel interface (for the server only) (optional)
3) DVPN policy suite configuration
DVPN policy suite configuration tasks are described in the following sections:
Creating a DVPN policy and entering its view
Configuring how the DVPN server authenticates the clients (Optional. Defaults to
NONE.)
Configuring an encryption algorithm suite for sessions (Optional. Defaults to
des-md5-dh1.)
Configuring the idle timeout period for the sessions (Optional. Defaults to 300
seconds.)
Configuring the interval for sending keepalive packets (Optional. Defaults to 10
seconds)
Configuring the session request interval (Optional. Defaults to 10 seconds.)
Configuring the IPSec algorithm suite (Optional. Defaults to des-md5-dh1.)
Configuring the lifetime of the IPSec SA (Optional. Defaults to 3,600 seconds.)
Since some commands must be configured on both the server and the clients, the
following describes the configuration tasks by category: basic configuration for the
server, basic configuration for the clients, tunnel interface configuration, DVPN class
configuration, and DVPN policy configuration.

4.2.1 Configuring a DVPN Server (Basic Configuration)

I. Enabling/disabling DVPN
Use these commands to enable/disable DVPN on a device. If you disable DVPN on a
DVPN server, the existing DVPN sessions are removed after they time out.
Perform the following configuration in system view on a DVPN server.
3Com Corporation
4-10
Chapter 4 DVPN