HP FlexNetwork MSR2003 Configuration Manual page 12

Configuration example ··························································································································· 309
Configuring a DS-Lite tunnel ·························································································································· 311
Configuration example ··························································································································· 312
Configuring an IPv6 over IPv6 tunnel ············································································································ 314
Configuration example ··························································································································· 315
Displaying and maintaining tunneling configuration ······················································································· 316
Troubleshooting tunneling configuration ········································································································ 317
Symptom ················································································································································ 317
Analysis ·················································································································································· 317
Solution ·················································································································································· 317
Configuring GRE ························································································· 318
Overview ························································································································································ 318
GRE encapsulation format ····················································································································· 318
GRE tunnel operating principle ·············································································································· 318
GRE security mechanisms ····················································································································· 319
GRE application scenarios ····················································································································· 319
Protocols and standards ························································································································ 321
Configuring a GRE/IPv4 tunnel ······················································································································ 322
Configuration guidelines ························································································································· 322
Configuration procedure ························································································································· 322
Configuring a GRE/IPv6 tunnel ······················································································································ 323
Configuration guidelines ························································································································· 324
Configuration procedure ························································································································· 324
Displaying and maintaining GRE ··················································································································· 325
GRE configuration examples ························································································································· 326
Configuring an IPv4 over IPv4 GRE tunnel ···························································································· 326
Configuring an IPv4 over IPv6 GRE tunnel ···························································································· 328
Troubleshooting GRE ···································································································································· 330
Symptom ················································································································································ 330
Analysis ·················································································································································· 330
Solution ·················································································································································· 331
Configuring ADVPN ···················································································· 332
Overview ························································································································································ 332
ADVPN structures ·································································································································· 332
How ADVPN operates ···························································································································· 334
NAT traversal ········································································································································· 337
ADVPN configuration task list ························································································································ 337
Configuring AAA ············································································································································ 337
Configuring the VAM server ··························································································································· 337
Creating an ADVPN domain ·················································································································· 338
Enabling the VAM server ······················································································································· 338
Configuring a pre-shared key for the VAM server ·················································································· 338
Configuring hub groups ·························································································································· 339
Configuring the port number of the VAM server ····················································································· 340
Specifying authentication and encryption algorithms for the VAM server ·············································· 341
Configuring an authentication method ··································································································· 341
Configuring keepalive parameters ········································································································· 341
Configuring the retry timer ······················································································································ 342
Configuring the VAM client ···························································································································· 342
Creating a VAM client ···························································································································· 343
Enabling VAM clients ····························································································································· 343
Specifying VAM servers ························································································································· 343
Specifying an ADVPN domain for a VAM client ····················································································· 343
Configuring a pre-shared key for a VAM client ······················································································ 344
Setting the retry timer and retry times for a VAM client ·········································································· 344
Setting the dumb timer for a VAM client ································································································· 344
Configuring a username and password for a VAM client ······································································· 345
Configuring an ADVPN tunnel interface ········································································································· 345
Configuring routing ········································································································································· 347
Configuring IPsec for ADVPN tunnels ··········································································································· 347
x