Huawei 3com secpath100f DVPN Configuration

Server-side configuration (This example uses Secpath 100f, the related profile can refer to the Lian-Shao group VPN configuration)

1.Secpath Basic Configuration

Firewall Packet-filter default Permit//* This command must be, Secpath to prohibit all packets through/

2.DVPN Service-side configuration

Interface tunnel0/* Create the Tunnel interface * *

IP Add 172.16.2.1 255.255.255.0/* Define IP address and subnet mask * *

Tunnel-protocol UDP dvpn/* Use UDP as a tunnel protocol, also use GRE, here Optional * *

SOURCE E0/1/* Specifies the original interface when establishing the tunnel, this interface must have a public network address!! */

/* If ADSL dialing, you should specify the virtual dialing port.

DVPN Interface-type Server/* Specifies that the Dvpn interface type is server-side * *

DVPN Dvpn-id 169/* Specifies the Dvpn ID number, if the end ID number is different, or the ID number is not specified,

When using dis dvpn map All, we can see the IP address of the End-to-end public network, but can't see the Dvpn ID and the tunnel address on the end.

Client-side Configuration

1. Define a DVPN category

Dvpn class Leaf/* Defines a category called a leaf.

Public-ip 222.170.xxx.xxx/* Specify the service end public IP address * *

Private-ip 172.16.2.1/* Specify the address to the end of the tunnel * *

2. Tunnel Port Configuration

Interface tunnel0/* Create tunnel 0 Port * *

IP Add 172.16.2.21 255.255.255.0/* Define IP address and subnet mask * *

Tunnel-protocol UDP dvpn/* using UDP as a tunneling protocol, note that the corresponding to the server side

Sourece E2/1/* Specifies the source port when the tunnel is established, and must have a public network ip*/

Dvpn Interface-type Client/* Specify DVPN interface type as client * *

DVPN Dvpn-id 169/* Specify DVPN ID number, note and service side corresponding/

Dvpn Server Leaf/* is associated with the DVPN category defined above.

Dvpn Register-type forward/* This command means that in the case of a star-shaped dvpn, and each division is communicated via the server-side forwarding, this command is estimated to be

No interoperability with other divisions

Finally, don't forget to add to the other side of the private network route, and just don't forget to add the junction to the relevant area, I used to the DMZ area