Verifying the configuration – H3C Technologies H3C SecPath F1000-E User Manual
Page 485
473
[Spoke2-Tunnel1] vam client dvpn1spoke2
[Spoke2-Tunnel1] ip address 10.0.1.4 255.255.255.0
[Spoke2-Tunnel1] source ethernet 1/1
[Spoke2-Tunnel1] ospf network-type p2mp
[Spoke2-Tunnel1] ospf dr-priority 0
[Spoke2-Tunnel1] ipsec profile vamp
[Spoke2-Tunnel1] quit
5.
Configure OSPF:
# Configure OSPF for the public network.
[Spoke2] ospf 100
[Spoke2-ospf-100] area 0
[Spoke2-ospf-100-area-0.0.0.0] network 192.168.1.4 0.0.0.255
[Spoke2-ospf-100-area-0.0.0.0] quit
# Configure OSPF for the private network.
[Spoke2] ospf 200
[Spoke2-ospf-200] area 0
[Spoke2-ospf-200-area-0.0.0.0] network 10.0.1.4 0.0.0.255
[Spoke2-ospf-200-area-0.0.0.0] network 10.0.3.1 0.0.0.255
Verifying the configuration
# Display the address mapping information of all VAM clients registered with the primary VAM server.
[PrimaryServer] display vam server address-map all
VPN name: 1
Total address-map number: 4
Private-ip Public-ip Type Holding time
10.0.1.1 192.168.1.1 hub 0H 7M 35S
10.0.1.2 192.168.1.2 hub 0H 13M 8S
10.0.1.3 192.168.1.3 spoke 0H 3M 58S
10.0.1.4 192.168.1.4 spoke 0H 0M 29S
# Display the address mapping information of all VAM clients registered with the secondary
VAM server (backup).
[SecondaryServer] display vam server address-map all
VPN name: 1
Total address-map number: 4
Private-ip Public-ip Type Holding time
10.0.1.1 192.168.1.1 hub 0H 8M 46S
10.0.1.2 192.168.1.2 hub 0H 14M 58S
10.0.1.3 192.168.1.3 spoke 0H 5M 9S
10.0.1.4 192.168.1.4 spoke 0H 1M 40S
The output shows that Hub 1, Hub 2, Spoke 1, and Spoke 2 all have registered their address mapping
information with the VAM servers.
# Display the DVPN tunnel information of Hub 1.
[Hub1] display dvpn session all
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS