Huawei 3com secpath100f DVPN Configuration

Source: Internet
Author: User

Server-side configuration (This example uses Secpath 100f, the related profile can refer to the Lian-Shao group VPN configuration)

1.Secpath Basic Configuration

Firewall Packet-filter default Permit//* This command must be, Secpath to prohibit all packets through/

2.DVPN Service-side configuration

Interface tunnel0/* Create the Tunnel interface * *

IP Add 172.16.2.1 255.255.255.0/* Define IP address and subnet mask * *

Tunnel-protocol UDP dvpn/* Use UDP as a tunnel protocol, also use GRE, here Optional * *

SOURCE E0/1/* Specifies the original interface when establishing the tunnel, this interface must have a public network address!! */

/* If ADSL dialing, you should specify the virtual dialing port.

DVPN Interface-type Server/* Specifies that the Dvpn interface type is server-side * *

DVPN Dvpn-id 169/* Specifies the Dvpn ID number, if the end ID number is different, or the ID number is not specified,

When using dis dvpn map All, we can see the IP address of the End-to-end public network, but can't see the Dvpn ID and the tunnel address on the end.

Client-side Configuration

1. Define a DVPN category

Dvpn class Leaf/* Defines a category called a leaf.

Public-ip 222.170.xxx.xxx/* Specify the service end public IP address * *

Private-ip 172.16.2.1/* Specify the address to the end of the tunnel * *

2. Tunnel Port Configuration

Interface tunnel0/* Create tunnel 0 Port * *

IP Add 172.16.2.21 255.255.255.0/* Define IP address and subnet mask * *

Tunnel-protocol UDP dvpn/* using UDP as a tunneling protocol, note that the corresponding to the server side

Sourece E2/1/* Specifies the source port when the tunnel is established, and must have a public network ip*/

Dvpn Interface-type Client/* Specify DVPN interface type as client * *

DVPN Dvpn-id 169/* Specify DVPN ID number, note and service side corresponding/

Dvpn Server Leaf/* is associated with the DVPN category defined above.

Dvpn Register-type forward/* This command means that in the case of a star-shaped dvpn, and each division is communicated via the server-side forwarding, this command is estimated to be

No interoperability with other divisions

Finally, don't forget to add to the other side of the private network route, and just don't forget to add the junction to the relevant area, I used to the DMZ area

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.