Tasks at a glance
(Optional.)
Configuring IPsec for ADVPN tunnels
Configuring AAA
The VAM server can use AAA to authenticate clients. Clients passing AAA authentication can access
the ADVPN domain. For information about AAA configuration, see Security Configuration Guide.
Configuring the VAM server
Tasks at a glance
(Required.)
(Required.)
(Required.)
(Required.)
(Optional.)
Setting the port number of the VAM server
(Optional.)
Specifying authentication and encryption algorithms for the VAM server
(Optional.)
Configuring an authentication method
(Optional.)
Configuring keepalive parameters
(Optional.)
Setting the retry timer
Creating an ADVPN domain
Step
1.
Enter system view.
2.
Create an ADVPN domain
and enter ADVPN domain
view.
Enabling the VAM server
Step
1.
Enter system view.
2.
Enable the VAM server.
Creating an ADVPN domain
Enabling the VAM server
Configuring a pre-shared key for the VAM server
Configuring hub groups
Command
system-view
•
•
Command
system-view
vam server advpn-domain
domain-name [ id domain-id ]
Enable the VAM server for one or all
ADVPN domains:
vam server enable [ advpn-domain
domain-name ]
Enable the VAM server for an ADVPN
domain:
a. vam server advpn-domain
domain-name [ id domain-id ]
b. server enable
329
Remarks
N/A
By default, no ADVPN domains
exist.
Set a unique ID for an ADVPN
domain.
Remarks
N/A
Use either command.
By default, the VAM
server is disabled.