6.1 DSVPN Overview..........................................................................................................................................345

6.2 DSVPN Features Supported by the AR1200..................................................................................................345

6.3 Configuring DSVPN.......................................................................................................................................346

6.3.1 Establishing the Configuration Task.....................................................................................................346

6.3.2 Configuring MGRE...............................................................................................................................347

6.3.3 Configuring Tunnel Routes...................................................................................................................347

6.3.4 Configuring NHRP on a Branch............................................................................................................348

6.3.5 Configuring NHRP on the Central Office.............................................................................................349

6.3.6 (Optional) Configuring an IPSec Profile...............................................................................................350

6.3.7 Checking the Configuration...................................................................................................................352

6.4 Maintaining DSVPN.......................................................................................................................................352

6.4.1 Displaying the DSVPN Configuration..................................................................................................352

6.4.2 Clearing DSVPN Statistics....................................................................................................................352

6.5 Configuration Examples.................................................................................................................................353

6.5.1 Example for Configuring DSVPN When Branches Learn Routes from Each Other............................353

6.5.2 Example for Configuring DSVPN When Branches Have Only Summarized Routes to the Central Office

........................................................................................................................................................................358

7 SSL VPN Configuration...........................................................................................................363

7.1 SSL VPN Overview........................................................................................................................................364

7.2 SSL VPN Features Supported by the AR1200...............................................................................................365

7.3 Configuring Basic SSL VPN Functions.........................................................................................................366

7.3.1 Establishing the Configuration Task.....................................................................................................366

7.3.2 Creating a Virtual Gateway...................................................................................................................367

7.3.3 Configuring Intranet and Extranet Interfaces........................................................................................367

7.3.4 Binding an AAA Domain to the Virtual Gateway................................................................................368

7.3.5 Enabling Basic SSL VPN Functions.....................................................................................................369

7.3.6 Checking the Configuration...................................................................................................................370

7.4 Managing SSL VPN Users.............................................................................................................................370

7.5 Configuring SSL VPN Services.....................................................................................................................372

7.5.1 Establishing the Configuration Task.....................................................................................................372

7.5.2 Creating a Virtual Gateway...................................................................................................................373

7.5.3 Configuring the Web Proxy Service......................................................................................................373

7.5.4 Configuring the Port Forwarding Service.............................................................................................374

7.5.5 Configuring the IP Forwarding Service.................................................................................................375

7.5.6 Checking the Configuration...................................................................................................................377

7.6 Configuration Examples.................................................................................................................................377

7.6.1 Example for Configuring the SSL VPN Gateway.................................................................................377

Issue 01 (2012-04-20)

Huawei Proprietary and Confidential

Contents

Table of Contents