H3C Technologies H3C Intelligent Management Center - Manual (Page 195)

185
4. Modify the private IP address of hub 1 in the Private IP Address box.
The VAM server uses private IP addresses to identify VAM clients. Hub 1 uses the private IP
address as the IP address of the tunnel interface.
5. Modify the VAM client name of Hub 1 in the VAM Client Name box.
This setting corresponds to the CLI command vam client name client-name.
6. Modify the AAA authentication username for Hub 1 in the VAM Username box.
If the authentication method is RADIUS, whether to include the domain name in the entered
username depends on the Username Format setting in RADIUS.
7. Select the Plaintext or Ciphertext format for the AAA authentication key in the Password Type field.
8. Modify the AAA authentication key for Hub 1 in the VAM Password box.
9. Select a CA domain from the CA Domain list.
CA domains are configured on the hub device. The CA Domain list displays CA domains that IVM
obtains from the device. The CA domain takes effect only when the IKE authentication type is CA
Authentication. There is no need to select a CA domain when the IKE authentication method is
Pre-Shared Key.
10. Modify the interval between VAM packet retransmissions in the Retransmission Interval box.
The default interval is 5 seconds.
11. Modify the number of the tunnel interface.
This setting corresponds to the CLI command interface tunnel number.
12. Select a tunnel source interface from the Tunnel Source Interface list.
The Tunnel Source Interface list displays the interfaces that IVM obtains from the hub device.
13. Redistribute routes from the following routing protocols:
{
Static—Select this option to redistribute static routes to the routing protocol used by DVPN. This
setting corresponds to the CLI command import-route static.
{
BGP—Select this option to redistribute BGP routes to the routing protocol used by DVPN. This
setting corresponds to the CLI command import-route bgp.
{
RIP—Select this option to redistribute the RIP routes of one or all RIP processes to the routing
protocol used by DVPN. This setting corresponds to the CLI command import-route rip
process-id or import-route rip all-processes.
{
OSPF—Select this option to redistribute the OSPF routes of one or all OSPF processes to the
routing protocol used by DVPN. This setting corresponds to the CLI command import-route ospf
process-id or import-route ospf all-processes.
14. Click Configure Hub 2 and follow steps 1 through 13 to configure Hub 2.
15. Configure advanced hub settings as described in the following section or click OK to exit the hub
configuration page.
Modifying advanced hub settings
This task is optional. Advanced hub settings are inherited from the security template specified in global
DVPN settings. You can modify these settings in the hub advanced configuration.
To modify advanced hub settings:
1. Click Advanced Configuration at the upper right corner.
Advanced settings are displayed at the bottom area.
The DVPN Tunnel Information area shows the following information: