Huawei AR1200 series Configuration Manual page 319

Huawei AR1200 Series Enterprise Routers
Configuration Guide - VPN
4.
5.
6.
7.
8.
9.
Step 2 Perform the following steps on the server router:
1.
2.
3.
4.
5.
6.
7.
Issue 01 (2012-04-20)
(Optional) Run:
remote-name name
A name is specified for the remote IKE peer.
(Optional) Run:
authentication-method { pre-share |
An authentication method is specified for the IKE proposal.
(Optional) Run:
pre-shared-key key
An authenticator is configured for pre-shared key authentication.
Run:
quit
The system view is displayed.
Run:
interface interface-type interface-number
The interface view is displayed.
Run:
ipsec efficient-vpn(interface view) efficient-vpn-name
The Efficient VPN policy is applied to the interface.
Run:
system-view
The system view is displayed.
Run:
ip pool ip-pool-name
A global address pool is created.
Run:
network ip-address [ mask { mask | mask-length } ]
An allocable network segment address is specified for the global address pool.
Run:
quit
The system view is displayed.
Run:
aaa
The AAA view is displayed.
Run:
service-scheme service-scheme-name
A service scheme is created and the service scheme view is displayed.
(Optional) Run:
dns ip-address
The IP address of the primary DNS server is specified.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
rsa-signature }
5 IPSec Configuration
308