Deploying gre over ipsec tunnels, Building a dvpn network – H3C Technologies H3C Intelligent Management Center User Manual
Page 142
132
4.
Configure additional settings:
The additional settings are inherited from the VPN domain. You can modify theses settings for the
GRE over IPsec tunnel.
To configure additional settings:
a.
Enter the GRE keepalive interval in the GRE Keepalive(sec) box.
b.
Enter the maximum number of GRE keepalive attempts in the GRE Transmission Attempts box.
c.
Select the Packet Checksum option to enable packet checksum for the tunnel.
d.
Enter the GRE tunnel interface key in the GRE Tunnel Interface Key box.
IVM assigns the key to the hub and spoke.
5.
Click OK.
Deploying GRE over IPsec tunnels
1.
Click the Service tab.
2.
From the navigation tree, select IPsec VPN Manager > IPsec Resources > VPN Domains.
3.
Click a VPN domain name to enter the VPN domain page.
The Tunnel List shows all GRE over IPsec tunnels, including configured and unconfigured tunnels.
IVM can deploy only configured tunnels. To complete configuration for an unconfigured tunnel,
click the Configuration icon
for the tunnel and configure the settings.
4.
Click the Operation icon
for a tunnel.
A menu appears for you to check tunnel settings:
{
View Hub's Current Configuration
{
View Spoke's Current Configuration
{
View IVM's Configuration for Hub
{
View IVM's Configuration for Spoke
5.
Click the menu options to verify that all settings are complete.
6.
Select the tunnels to be deployed.
7.
Click Deploy.
Building a DVPN network
DVPN enables enterprises to build a VPN network for branches that use dynamic public addresses.
DVPN uses the VPN Address Management (VAM) protocol to collect, maintain, and distribute dynamic
public addresses.