3Com MSR 50 Series Configuration Manual page 1570

1570 C 80: DVPN C
HAPTER
n
ONFIGURATION
To do...
Specify the source address or
interface of the tunnel
interface
Bind a VAM client to the
tunnel interface
Specify an interval for sending
DVPN keepalives and the
maximum sending times
Specify an idle timeout for the
spoke-spoke tunnel
Specify an dumb interval after
a DVPN tunnel establishment
failure
Specify the network type of
the OSPF interface
Specify the DR priority of the
OSPF interface
Reference an IPSec profile for
the DVPN tunnel
If you configure the source address of a tunnel by specifying the source
■
interface, the tunnel takes the primary IP address of the source interface as its
source address.
Tunnel interfaces of the same VPN domain must be configured with private
■
addresses in the same segment.
Tunnel interfaces of the same VPN domain must be configured with the same
■
DVPN keepalive interval and transmission attempt limit.
You can configure only one IPSec profile on a tunnel interface.
■
When configuring the network type of an OSPF interface, select broadcast for
■
a full-mesh network and p2mp for a Spoke-Hub network.
Use the command...
source { ip-address |
interface-type
interface-number }
vam client client-name
keepalive [ seconds [ times ] ] Optional
dvpn session idle-time
time-interval
dvpn session dumb-time
time-interval
ospf network-type
{ broadcast | p2mp }
ospf dr-priority priority
ipsec profile
ipsec-profile-name
Remarks
Required
The source IP address of the
tunnel is the IP address of the
physical interface that sends
the DVPN packet.
Not specified by default
Required
A DVPN tunnel interface must
be bound to a VAM client;
otherwise the tunnel interface
cannot become up.
The client to be bound must
exist and is not bound to any
other tunnel interface.
No VAM client is bound to the
DVPN tunnel interface by
default.
10 seconds and 3 sending
times by default
Optional
300 seconds by default
Optional
120 seconds by default
Required
Not specified by default
A DVPN tunnel can use only
two types of OSPF interfaces:
broadcast and p2mp.
Optional for the hub end;
required for the spoke end to
make it not participate in
DR/BDR election
Optional
The IPSec profile is used to
protect the data and control
packets on the DVPN tunnel.
Not referenced by default