415
[Spoke3-Tunnel1] source gigabitethernet 2/0/1
[Spoke3-Tunnel1] tunnel protection ipsec profile abc
[Spoke3-Tunnel1] quit
Configuring Spoke 4
1. Configure IP addresses for the interfaces. (Details not shown.)
2. Configure the VAM client:
# Create VAM client Spoke4.
<Spoke4> system-view
[Spoke4] vam client name Spoke4
# Specify ADVPN domain abc for the VAM client.
[Spoke4-vam-client-Spoke4] advpn-domain abc
# Set the pre-shared key to 123456.
[Spoke4-vam-client-Spoke4] pre-shared-key simple 123456
# Set both the username and password to spoke4.
[Spoke4-vam-client-Spoke4] user spoke4 password simple spoke4
# Specify the primary and secondary VAM servers.
[Spoke4-vam-client-Spoke4] server primary ip-address 1.0.0.11
[Spoke4-vam-client-Spoke4] server secondary ip-address 1.0.0.12
# Enable the VAM client.
[Spoke4-vam-client-Spoke4] client enable
[Spoke4-vam-client-Spoke4] quit
3. Configure an IPsec profile:
# Configure IKE.
[Spoke4] ike keychain abc
[Spoke4-ike-keychain-abc] pre-shared-key address 0.0.0.0 0.0.0.0 key simple 123456
[Spoke4-ike-keychain-abc] quit
[Spoke4] ike profile abc
[Spoke4-ike-profile-abc] keychain abc
[Spoke4-ike-profile-abc] quit
# Configure the IPsec profile.
[Spoke4] ipsec transform-set abc
[Spoke4-ipsec-transform-set-abc] encapsulation-mode transport
[Spoke4-ipsec-transform-set-abc] esp encryption-algorithm des-cbc
[Spoke4-ipsec-transform-set-abc] esp authentication-algorithm sha1
[Spoke4-ipsec-transform-set-abc] quit
[Spoke4] ipsec profile abc isakmp
[Spoke4-ipsec-profile-isakmp-abc] transform-set abc
[Spoke4-ipsec-profile-isakmp-abc] ike-profile abc
[Spoke4-ipsec-profile-isakmp-abc] quit
4. Configure OSPF to advertise private networks.
[Spoke4] ospf 1
[Spoke4-ospf-1] area 2
[Spoke4-ospf-1-area-0.0.0.2] network 192.168.2.0 0.0.0.255
[Spoke4-ospf-1-area-0.0.0.2] network 192.168.50.0 0.0.0.255
[Spoke4-ospf-1-area-0.0.0.2] network 192.168.60.0 0.0.0.255
[Spoke4-ospf-1-area-0.0.0.2] quit
[Spoke4-ospf-1] quit
To Next Page
Loading...
Need help?
General
