H3C Technologies H3C Intelligent Management Center - Manual (Page 115)

105
Figure 40 Building an IPsec VPN network
Adding IPsec devices
After you add IPsec devices to the IMC Platform, IVM automatically manages the IPsec devices except for
the IPsec devices that run CWMP. For information about adding devices to the IMC Platform, see HP
Intelligent Management Center v7.0 Enterprise and Standard Platform Administrator Guide.
After you configure CWMP on spokes, the spokes automatically associate with BIMS and are managed
by BIMS.
To add IPsec devices managed by BIMS to IVM, see "
Managing IPsec devices ."
Adding IPsec VPN domains
IVM defines an IPsec VPN as an IPsec VPN domain, in which IPsec tunnels have similar settings.
To add an IPsec VPN domain:
1. Click the Service tab.
2. From the navigation tree, select IPsec VPN Manager > IPsec Resources > VPN Domains.
3. Click Add in the VPN Domain List to add an IPsec VPN domain by completing the following
settings:
a. Configure basic settings
− Configure basic VPN domain settings.
− Configure default IPsec and IKE settings.
b. Configure security proposals
− Configure an IPsec proposal.
− Configure an IKE proposal.
The following sections describe these tasks.
IPsec tunnels in a VPN domain inherit the default IPsec and IKE settings, IPsec proposal, and IKE
proposal of the VPN domain.
4. Click Accomplish to add the IPsec VPN domain.