Configuring basic hub settings – H3C Technologies H3C Intelligent Management Center User Manual
Page 106
96
−
Permit RADIUS Client—Select this option to enable the VAM server to receive and send
RADIUS packets.
{
Local—Enables local authentication on VAM clients.
{
None—Disables authenticating VAM clients.
7.
Click Next to configure the hub.
Configuring basic hub settings
A DVPN network can accommodate up to two hubs, which establish a permanent DVPN tunnel for
stateful failover.
Hub configuration includes basic and advanced settings.
To configure basic hub settings.
1.
Click Select Device next to the Hub1 box.
A window appears. See step 2 or step 3 in "
" to select a hub.
2.
Enter the IP address and port of the primary VAM server in the Primary VAM Server IP and Primary
VAM Server Port boxes.
The Primary VAM Server IP and Primary VAM Server Port boxes are filled with the VAM Server1
settings configured in "
." You can modify the settings at this step.
3.
Enter the IP address and port of the secondary VAM server in the Secondary VAM Server IP and
Secondary VAM Server Port boxes.
The Secondary VAM Server IP and Secondary VAM Server Port boxes are filled with the VAM
Server2 settings configured in "
." The two options are available only
when VAM Server2 has been configured. You can modify the settings at this step.
4.
Enter the private IP address of hub 1 in the Private IP Address box.
The VAM server uses private IP addresses to identify VAM clients. After you select Hub 1, IVM
automatically assigns an IP address from the private subnet set in "
" to Hub 1. You can modify the private IP address at this step. Hub 1 uses the private IP
address as the IP address of the tunnel interface.
5.
Enter the VAM client name of Hub 1 in the VAM Client Name box.
This setting corresponds to the CLI command vam client name client-name.
6.
Enter the AAA authentication username for Hub 1 in the VAM Username box.
If the authentication method is RADIUS, whether to include the domain name in the entered
username depends on the Username Format setting in RADIUS.
7.
Select the Plaintext or Ciphertext format for the AAA authentication key in the Password Type field.
8.
Enter the AAA authentication key for Hub 1 in the VAM Password box.
9.
Select a CA domain from the CA Domain list.
CA domains are configured on the hub device. The CA Domain list displays CA domains that IVM
obtains from the device. The CA domain takes effect only when the IKE authentication type is CA
Authentication. There is no need to select a CA domain when the IKE authentication method is
Pre-Shared Key.
10.
Enter the interval between VAM packet retransmissions in the Retransmission Interval box.
The default interval is 5 seconds.
11.
Enter the number of the tunnel interface.
This setting corresponds to the CLI command interface tunnel number.