3Com 3C13636 Configuration Manual page 1270

3Com Router 3000 Ethernet Family
Configuration Guide
Disable a DVPN class on the tunnel
interface
A tunnel interface has no DVPN class applied by default.
VI. Applying the DVPN policy to the tunnel interface (for the server only)
After configuring the policy in DVPN policy view on the server, use the following
command to apply it to the DVPN domain.
Perform the following configuration in tunnel interface view on the server.
Table 4-15 Apply the DVPN policy to the tunnel interface
Apply the DVPN policy to the tunnel
interface
Disable the DVPN policy applied to the
tunnel interface
A tunnel interface does not have a DVPN policy applied by default.
VII. Configuring the data stream to be encrypted using IPSec
Packets forwarded in a DVPN domain are encrypted using IPSec by default. You can
have packets that match specified ACLs not encrypted by performing the following
operations.
Note:
This command must be configured in combination with the acl and rule commands,
and the rule command must be configured with the deny keyword, which specifies
packets denied by the rule command are not encrypted using IPSec. Otherwise, this
command does not take effect.
Perform the following configuration in tunnel interface view.
Table 4-16 Configure the data stream to be encrypted using IPSec
Specify the data streams to be excluded
from IPSec encryption
Operation
Operation
Operation
3Com Corporation
4-16
Command
undo dvpn server dvpn-class-name
Command
dvpn policy dvpn-policy-name
undo dvpn policy dvpn-policy-name
Command
dvpn security acl acl-number
Chapter 4 DVPN