H3C Technologies H3C Intelligent Management Center - Manual (Page 111)

101
h. Enter the number of the tunnel interface.
This setting corresponds to the CLI command interface tunnel number.
i. Select a tunnel source interface from the Tunnel Source Interface list.
The Tunnel Source Interface list displays the interfaces that IVM obtains from the spoke device
j. Redistribute routes from the following routing protocols:
− Static—Select this option to redistribute static routes to the routing protocol used by DVPN.
This setting corresponds to the CLI command import-route static.
− BGP—Select this option to redistribute BGP routes to OSPF used by DVPN. This setting
corresponds to the CLI command import-route bgp.
− RIP—Select this option to redistribute the RIP routes of one or all RIP processes to the routing
protocol used by DVPN. This setting corresponds to the CLI command import-route rip
process-id or import-route rip all-processes.
− OSPF—Select this option to redistribute the OSPF routes of one or all OSPF processes to the
routing protocol used by DVPN. This setting corresponds to the CLI command import-route
ospf process-id or import-route ospf all-processes.
k. Configure advanced spoke settings as described in the following section or click Finish to
complete DVPN domain configuration.
Configuring advanced spoke settings
This task is optional. Advanced spoke settings are inherited from the security template specified in
"
Configuring global DVPN settings ."
To configure advanced hub settings:
1. Click Advanced Configuration at the upper right corner.
Advanced settings are displayed at the bottom area.
The DVPN Tunnel Information area shows the following information:
{
VPN Name—Name of the DVPN, configured in " Configuring global DVPN settings ."
{
Routing Protocol—Routing protocol used by DVPN, which is OSPF, iBGP, or eBGP:
− OSPF—Displays the OSPF process ID and area ID.
− iBGP—Displays the local AS number and the cluster ID of the BGP route reflector. The cluster
ID is the same as the AS number.
− eBGP—Displays the initial AS number.
2. Enter an IPsec profile name in the IPsec Profile box.
The default IPsec profile name is profile.
3. Enter an IKE peer name in the IKE Peer box.
The default IKE peer name is peer.
4. Select the Plaintext or Ciphertext format for the IKE authentication key in the Key Type field.
The default setting is inherited from the security template.
5. Enter a pre-shared key in the Pre-Shared Key box.
The default setting is inherited from the security template.
6. Select Yes or No in the DPD Confg field.
The default setting is inherited from the security template. If you select Yes, configure the following
settings: