3Com 3C13636 Configuration Manual page 1280

3Com Router 3000 Ethernet Family
Configuration Guide
II. Network diagram
Ethernet0/0/0: 201.1.1.2/24 Ethernet0/0/0: 201.1.1.2/24 Ethernet0/0/0: 201.1.1.2/24 Ethernet0/0/0: 201.1.1.2/24 Ethernet0/0/0: 201.1.1.2/24 Ethernet0/0/0: 201.1.1.2/24 Ethernet0/0/0: 201.1.1.2/24
Tunnel0:10.0.0.2/24 Tunnel0:10.0.0.2/24 Tunnel0:10.0.0.2/24 Tunnel0:10.0.0.2/24 Tunnel0:10.0.0.2/24 Tunnel0:10.0.0.2/24 Tunnel0:10.0.0.2/24
Client1 Client1 Client1 Client1 Client1 Client1 Client1
Figure 4-3 Network diagram for DVPN with NAT traversal
III. Configuration procedure
1) Configure Server
# Enable DVPN.
<Server> system-view
[Server] dvpn service
# Configure interface Ethernet0/0/0.
[Server] interface Ethernet0/0/0
[Server-Ethernet0/0/0] ip address 201.1.1.1 255.255.255.0
[Server-Ethernet0/0/0] quit
# Create a DVPN policy and specify to use IPSec algorithm suite 5.
[Server] dvpn policy 1
[Server-dvpn-policy-1] data algorithm-suite 5
# Configure interface Ethernet0/0/1.
[Server] interface Ethernet0/0/1
[Server-Ethernet0/0/1] ip address 10.0.1.1 255.255.255.0
Server Server Server Server Server Server Server
Tunnel0 : 10.0. 0.1/24 Tunnel0 : 10.0. 0.1/24 Tunnel0 : 10.0. 0.1/24 Tunnel0 : 10.0. 0.1/24 Tunnel0 : 10.0. 0.1/24 Tunnel0 : 10.0. 0.1/24 Tunnel0 : 10.0. 0.1/24
Ethernet0/0 /0: 201. 1. 1. 1 Ethernet0/0 /0: 201. 1. 1. 1 Ethernet0/0 /0: 201. 1. 1. 1 Ethernet0/0 /0: 201. 1. 1. 1 Ethernet0/0 /0: 201. 1. 1. 1 Ethernet0/0 /0: 201. 1. 1. 1 Ethernet0/0 /0: 201. 1. 1. 1
Internet Internet Internet Internet Internet Internet Internet
NAT NAT NAT NAT
Ethernet0/0/1:192.168.1.1/24 Ethernet0/0/1:192.168.1.1/24 Ethernet0/0/1:192.168.1.1/24 Ethernet0/0/1:192.168.1.1/24 Ethernet0/0/1:192.168.1.1/24 Ethernet0/0/1:192.168.1.1/24 Ethernet0/0/1:192.168.1.1/24
Ethernet0/0/0 Ethernet0/0/0 Ethernet0/0/0 Ethernet0/0/0
Ethernet0/0/1:10.0.2.1/24 Ethernet0/0/1:10.0.2.1/24 Ethernet0/0/1:10.0.2.1/24 Ethernet0/0/1:10.0.2.1/24
Branch A Branch A Branch A Branch A Branch A Branch A Branch A
enable
3Com Corporation
Ethernet0/0/1:10. 0. 1.1/24 Ethernet0/0/1:10. 0. 1.1/24 Ethernet0/0/1:10. 0. 1.1/24 Ethernet0/0/1:10. 0. 1.1/24 Ethernet0/0/1:10. 0. 1.1/24 Ethernet0/0/1:10. 0. 1.1/24 Ethernet0/0/1:10. 0. 1.1/24
Headquarters Headquarters Headquarters Headquarters Headquarters Headquarters Headquarters
Ethernet0/0/0: 201.1.1.3 Ethernet0/0/0: 201.1.1.3 Ethernet0/0/0: 201.1.1.3 Ethernet0/0/0: 201.1.1.3 Ethernet0/0/0: 201.1.1.3 Ethernet0/0/0: 201.1.1.3 Ethernet0/0/0: 201.1.1.3
Tunnel0: 1 0.0.0.3/24 Tunnel0: 1 0.0.0.3/24 Tunnel0: 1 0.0.0.3/24 Tunnel0: 1 0.0.0.3/24 Tunnel0: 1 0.0.0.3/24 Tunnel0: 1 0.0.0.3/24 Tunnel0: 1 0.0.0.3/24
Client2 Client2 Client2 Client2 Client2 Client2 Client2
Ethernet0/0/1:10.1.3.1/24 Ethernet0/0/1:10.1.3.1/24 Ethernet0/0/1:10.1.3.1/24 Ethernet0/0/1:10.1.3.1/24 Ethernet0/0/1:10.1.3.1/24 Ethernet0/0/1:10.1.3.1/24 Ethernet0/0/1:10.1.3.1/24
4-26
Chapter 4 DVPN
Branch B Branch B Branch B Branch B Branch B Branch B Branch B