HPE FlexNetwork HSR6800 Configuration Manual page 12

Enabling the VAM server ·································································································· 329
Configuring a pre-shared key for the VAM server ··································································· 330
Configuring hub groups ···································································································· 330
Setting the port number of the VAM server ············································································ 332
Specifying authentication and encryption algorithms for the VAM server ····································· 332
Configuring an authentication method ·················································································· 333
Configuring keepalive parameters ······················································································· 333
Setting the retry timer ······································································································· 334
Configuring the VAM client ······································································································· 334
Creating a VAM client ······································································································· 334
Enabling VAM clients ······································································································· 335
Specifying VAM servers ···································································································· 335
Specifying an ADVPN domain for a VAM client ······································································ 335
Configuring a pre-shared key for a VAM client ······································································· 335
Setting the retry interval and retry number for a VAM client ······················································ 336
Setting the dumb timer for a VAM client················································································ 336
Configuring a username and password for a VAM client ·························································· 336
Configuring an ADVPN tunnel interface ······················································································ 337
Configuring routing ················································································································· 339
Configuring IPsec for ADVPN tunnels ························································································· 339
Displaying and maintaining ADVPN ··························································································· 339
ADVPN configuration examples ································································································ 341
IPv4 full-mesh ADVPN configuration example ······································································· 341
IPv6 full-mesh ADVPN configuration example ······································································· 348
IPv4 hub-spoke ADVPN configuration example ······································································ 356
IPv6 hub-spoke ADVPN configuration example ······································································ 363
IPv4 multi-hub-group ADVPN configuration example ······························································· 371
IPv6 multi-hub-group ADVPN configuration example ······························································· 384
IPv4 full-mesh NAT traversal ADVPN configuration example ···················································· 399
Configuring AFT ··········································································· 407
Overview ······························································································································ 407
AFT implementations ·············································································································· 407
Static AFT ······················································································································ 407
Dynamic AFT ················································································································· 407
Prefix translation ············································································································· 408
AFT internal server ·········································································································· 409
AFT translation process ··········································································································· 409
IPv6-initiated communication ····························································································· 409
IPv4-initiated communication ····························································································· 410
AFT with ALG ······················································································································· 411
AFT configuration task list ········································································································ 411
IPv6-initiated communication ····························································································· 411
IPv4-initiated communication ····························································································· 412
Enabling AFT ························································································································ 412
Configuring an IPv6-to-IPv4 destination address translation policy ···················································· 412
Configuring an IPv6-to-IPv4 source address translation policy ························································· 413
Configuring an IPv4-to-IPv6 destination address translation policy ···················································· 414
Configuring an IPv4-to-IPv6 source address translation policy ························································· 415
Configuring AFT logging ·········································································································· 416
Setting the ToS field to 0 for translated IPv4 packets ····································································· 416
Setting the Traffic Class field to 0 for translated IPv6 packets ·························································· 416
Displaying and maintaining AFT ································································································ 416
AFT configuration examples ····································································································· 417
Allowing IPv4 Internet access from an IPv6 network ······························································· 417
Providing FTP service from an IPv6 network to the IPv4 Internet ··············································· 420
Allowing mutual access between IPv4 and IPv6 networks ························································ 421
Allowing IPv6 Internet access from an IPv4 network ······························································· 423
Providing FTP service from an IPv4 network to the IPv6 Internet ··············································· 426
Configuring WAAS ······································································· 429
TFO ···································································································································· 429
x