3Com 3C13636 Configuration Manual page 1275

3Com Router 3000 Ethernet Family
Configuration Guide
I. Creating a DVPN policy and entering its view
Use these commands to create a DVPN policy and enter its view, enter an existing
DVPN policy view, or remove an existing DVPN policy. To remove a DVPN policy that is
in use, you must disable the policy first.
Perform the following configuration in system view.
Table 4-25 Create a DVPN policy and enter its view
Create a DVPN policy and enter its view
Remove a DVPN policy
No DVPN policy is configured by default.
II. Configuring how the DVPN server authenticates the clients
A DVPN server can authenticate the clients that want to access the DVPN domain. At
present, the supported authentication methods are PAP authentication and CHAP
authentication.
Perform the following configuration in DVPN policy view.
Table 4-26 Configure how the DVPN server authenticates the clients
Configure
authenticates the clients
A DVPN server does not authenticate the clients by default.
III. Configuring an encryption algorithm suite for sessions
DVPN supports the following algorithms for control packets in session negotiation: DES,
3DES, and AES encryption algorithms, MD5 and SHA1 authentication algorithms, and
DH-GROUP1 and DH-GROUP2 key negotiation algorithms. Use these commands to
specify the algorithm suite for the sessions between the server and the clients.
Perform the following configuration in DVPN policy view.
Table 4-27 Configure an encryption algorithm suite for the sessions
Configure the encryption algorithm suite
for sessions between the server and the
clients
Operation
Operation
how the DVPN
Operation
3Com Corporation
4-21
dvpn policy dvpn-policy-name
undo dvpn policy dvpn-policy-name
server authentication-client method { none |
chap | pap }
session algorithm-suite suite-number
Chapter 4 DVPN
Command
Command
Command