H3C Technologies H3C SecPath F1000-E - Manual (Page 453)

441
Figure 327 Viewing DVPN session information on Spoke 1
The information shows that no dynamic Spoke-Spoke tunnel is established between Spoke 1 and Spoke
2. They communicate through the Hubs.
Configuring DVPN at the CLI
DVPN configuration task list
When configuring DVPN, perform configuration in this order: the VAM server, the hubs, and the spokes.
Complete the following tasks to configure DVPN:
Task Remarks
Server side configuration.
Configuring AAA Optional
Configuring the VAM server Required
Client side configuration.
Configuring a VAM client Required
Configuring an IPsec profile Optional
Configuring the DVPN tunnel parameters Required
Configuring routing Required
Configuring AAA
A VAM server can employ AAA to authenticate the identities of clients accessing a VPN domain. For
AAA configuration, see Access Control Configuration Guide.
Configuring the VAM server
Complete the following tasks to configure a VAM server:
Task Remarks
Creating a VPN domain Required
Enabling VAM server Required