H3C Technologies H3C Intelligent Management Center - Manual (Page 128)

118
A menu appears for you to check tunnel settings:
{
View Hub's Current Configuration
{
View Spoke's Current Configuration
{
View IVM's Configuration for Hub
{
View IVM's Configuration for Spoke
5. Click the menu options to verify that all settings are complete.
6. Select the tunnels to be deployed.
7. Click Deploy.
Building a GRE over IPsec VPN network
As shown in Figure 41 , the administrator deploys two GRE over IPsec tunnels, one between HubA and
SpokeA and the other between HubA and SpokeB, to build a GRE over IPsec VPN.
Figure 41 Building a GRE over IPsec VPN network
Adding IPsec devices
After you add IPsec devices to the IMC Platform, IVM automatically manages the IPsec devices except for
the IPsec devices that run CWMP. For information about adding devices to the IMC Platform, see HP
Intelligent Management Center v7.0 Enterprise and Standard Platform Administrator Guide.
After you configure CWMP on spokes, the spokes automatically associate with BIMS and are managed
by BIMS.
To add IPsec devices managed by BIMS to IVM, see "
Managing IPsec devices ."
Adding GRE over IPsec VPN domains
IVM defines a GRE over IPsec VPN as a GRE over IPsec VPN domain, in which GRE over IPsec tunnels
have similar settings.
To add a GRE over IPsec VPN domain:
1. Click the Service tab.
Headquarters
Internet
Branch A
Branch B
Headquarters
NMS
IMC
SpokeB
PLAT IVM
HubA
BIMS
SpokeA
VPN
S0/0/1
S0/0/0
S0/0/2
GRE Tunnel
IPsec Tunnel