Configuration procedure – H3C Technologies H3C SecPath F1000-E User Manual
Page 64

52
Configuration procedure
1.
Configure Router A:
# Configure an IP address for interface GigabitEthernet 0/1.
[RouterA] interface GigabitEthernet 0/1
[RouterA–GigabitEthernet0/1] ip address 11.1.1.1 255.255.255.0
[RouterA–GigabitEthernet0/1] quit
# Configure an IP address for interface GigabitEthernet 0/2.
[RouterA] interface GigabitEthernet 0/2
[RouterA–GigabitEthernet0/2] ip address 192.168.11.1 255.255.255.0
[RouterA–GigabitEthernet0/2] quit
# Create a tunnel interface Tunnel0 and configure an IP address for it.
[RouterA] interface tunnel 0
[RouterA-Tunnel0] ip address 192.168.22.1 255.255.255.0
# Configure the tunnel encapsulation mode as P2MP GRE.
[RouterA-Tunnel0] tunnel-protocol gre p2mp
# Configure the mask of the branch network as 255.255.255.0.
[RouterA-Tunnel0] gre p2mp branch-network-mask 255.255.255.0
# Set the tunnel entry aging time to 20 seconds.
[RouterA-Tunnel0] gre p2mp aging-time 20
# Configure the source IP address of interface Tunnel0.
[RouterA-Tunnel0] source 11.1.1.1
[RouterA-Tunnel0] quit
# Configure a static route to the branch network with the outgoing interface being Tunnel0.
[RouterA] ip route-static 192.168.12.0 255.255.255.0 tunnel 0
2.
Configure Router B:
# Configure an IP address for interface GigabitEthernet 0/1.
[RouterB] interface GigabitEthernet 0/1
[RouterB–GigabitEthernet0/1] ip address 11.1.1.2 255.255.255.0
[RouterB–GigabitEthernet0/1] quit
# Configure an IP address for interface GigabitEthernet 0/2.
[RouterB] interface GigabitEthernet 0/2
[RouterB–GigabitEthernet0/2] ip address 192.168.12.1 255.255.255.0
[RouterB–GigabitEthernet0/2] quit
# Create a tunnel interface Tunnel0 and configure an IP address for it.
[RouterB] interface tunnel 0
[RouterB-Tunnel0] ip address 192.168.22.2 255.255.255.0
# Configure the tunnel encapsulation mode as GRE over IPv4.
[RouterB-Tunnel0] tunnel-protocol gre
# Configure the source IP address of interface Tunnel0.
[RouterB-Tunnel0] source 11.1.1.2
# Configure the destination IP address of interface Tunnel0.
[RouterB-Tunnel0] destination 11.1.1.1
[RouterB-Tunnel0] quit
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS