H3C Technologies H3C Intelligent Management Center - Manual (Page 102)

92
Figure 38 DVPN network
As shown in Figure 38 , HubA, SpokeA, and SpokeB are VAM clients. The IMC Platform manages VAM
ServerA, HubA, SpokeA, and SpokeB. IVM deploys DVPN settings to VAM ServerA, HubA, SpokeA,
and SpokeB through the IMC Platform.
After IVM deploys DVPN settings, HubA, SpokeA, and SpokeB register node information with VAM
ServerA, obtain tunnel destination addresses from VAM ServerA, and establish DVPN tunnels protected
by IPsec to the tunnel peers.
Adding IPsec devices
After you add IPsec devices to the IMC Platform, IVM automatically manages the IPsec devices.
For information about IPsec device management, see "
Managing IPsec devices ." For information about
adding devices to the IMC Platform, see HP Intelligent Management Center v7.0 Enterprise and Standard
Platform Administrator Guide.
Adding DVPN domains
IVM defines a DVPN as a DVPN domain.
To add a DVPN domain:
1. Click the Service tab.
2. From the navigation tree, select IPsec VPN Manager > IPsec Resources > VPN Domains.
3. Click Add in the VPN Domain List to add a DVPN domain by completing the following settings:
a. Configure basic DVPN settings.
b. Configure global DVPN settings.
c. Configure the VAM server.
d. Configure the hub.
e. Configure spokes.
The following sections describe these tasks.
Headquarters
Internet
Branch A
Branch B
NMS
SpokeB
HubA
SpokeA
VPN
S0/1/1
S0/1/0
S0/1/2
S0/1/0
IMC PLAT IVM
Internet
VAM ServerA
DVPN Tunnel Headquarters