Modifying basic spoke settings – H3C Technologies H3C Intelligent Management Center User Manual

Page 197

Advertising
background image

187

{

area area-id

{

network ip-address wildcard-mask

9.

Add a BGP network in the BGP Network List if the routing protocol used by DVPN is iBGP or eBGP:

a.

Click Add.
A window appears. The AS number is configured in global DVPN settings and cannot be
modified. For iBGP, the hub and spokes reside in the same AS. For eBGP, the AS number is the

initial AS number specified in global configuration.

b.

Enter the IP address to be advertised by BGP in the Private IP box.

c.

Enter the mask of the IP address in the Subnet Mask box.

d.

Click OK.

The following shows the commands for adding an BGP network at the CLI.

bgp as-number

network ip-address mask

IVM automatically configures the relationships between BGP peers. When iBGP is used, IVM
configures the hub device as the route reflector.

10.

Click OK.

Modifying basic spoke settings

1.

On the DVPN topology, click the

icon to enter the page for configuring spokes.

The Spoke Device List displays all the spokes.

2.

To modify a spoke:

a.

Click the Modify icon

for the spoke you want to modify.

The basic spoke settings are displayed at the bottom area.

b.

Modify the private IP address of the spoke device.
The VAM server uses private IP addresses to identify VAM clients.

c.

Select a CA domain from the CA Domain list.
CA domains are configured on the hub device. The CA Domain list displays CA domains that
IVM obtains from the device. The CA domain takes effect only when the IKE authentication type

is CA Authentication. There is no need to select a CA domain when the IKE authentication
method is Pre-Shared Key.

d.

Click OK.

3.

Configure other spoke settings:

a.

Modify the IP address and port of the primary VAM server in the Primary VAM Server IP and
Primary VAM Server Port boxes.

b.

Modify the IP address and port of the secondary VAM server in the Secondary VAM Server IP
and Secondary VAM Server Port boxes.
The two options are available only when VAM Server2 has been configured. You can modify
the settings at this step.

c.

Modify the VAM client name of the spoke in the VAM Client Name box.
This setting corresponds to the CLI command vam client name client-name.

d.

Enter the AAA authentication username for Hub 1 in the VAM Username box.

Advertising