H3C Technologies H3C Intelligent Management Center - Manual (Page 72)

62
Figure 35 Building an IPsec VPN network
Adding IPsec devices
After you add IPsec devices to the IMC Platform, IVM automatically manages the IPsec devices.
For information about IPsec device management, see "
Managing IPsec devices ." For information about
adding devices to the IMC Platform, see HP Intelligent Management Center v7.0 Enterprise and Standard
Platform Administrator Guide.
Adding IPsec VPN domains
IVM defines an IPsec VPN as an IPsec VPN domain, in which IPsec tunnels have similar settings.
To add an IPsec VPN domain:
1. Click the Service tab.
2. From the navigation tree, select IPsec VPN Manager > IPsec Resources > VPN Domains.
3. Click Add in the VPN Domain List to add an IPsec VPN domain by completing the following
settings:
a. Configure basic settings
− Configure basic VPN domain settings.
− Configure default IPsec and IKE settings.
b. Configure security proposals
− Configure an IPsec proposal.
− Configure an IKE proposal.
The following sections describe these tasks.
IPsec tunnels in a VPN domain inherit the default IPsec and IKE settings, IPsec proposal, and IKE
proposal of the VPN domain.
4. Click Accomplish to add the IPsec VPN domain.
Headquarters IPsec Tunnel
Internet
Branch A
Branch B
Headquarters
NMS
IMC
SpokeB
HubA
SpokeA
VPN
IMC PLAT IVM
s0/1/0
s0/1/1
s0/1/2