H3C Technologies H3C Intelligent Management Center - Manual (Page 175)

165
− Device Name—Modify the name of the virtual spoke.
− Interface Name—Modify the name of the spoke interface.
− Interface IP—Modify the IP address of the virtual spoke interface.
c. Click OK.
d. To copy the name and address of the spoke interface to another tunnel, click the Clone this
address to all subsequent hubs icon
.
4. Configure the IP address of the spoke interface:
a. Click the Modify Gateway IP icon for the IP address of a spoke interface.
The Modify Gateway IP window appears.
b. Enter a new IP address.
c. Click OK.
d. To copy the IP address of the spoke interface to another tunnel, click the Clone icon next to
a gateway IP address to copy the address to other tunnels.
e. Click OK to go back to the Tunnel List page of the IPsec VPN domain.
Configuring and deploying an IPsec tunnel
1. On the Tunnel List page, click the Configuration icon for an IPsec tunnel to enter the tunnel
configuration page. The page contains the following tabs.
{
Basic Information
{
Device Parameters
{
Security Proposals
{
Spoke Additional Settings
{
Hub Advanced Settings
{
Spoke Advanced Settings
2. Follow the same procedure as described in " 4 Building VPN networks with IVM " to configure the
IPsec tunnel between the hub and virtual spoke.
3. After the tunnel configuration is complete, click Back to go back to the Tunnel List page.
The configuration status of the tunnel is changed to Configured.
4. Click the Operation icon for the IPsec tunnel.
A menu appears for you to check the tunnel settings:
{
View Hub's Current Configuration
{
View IVM’s Configuration for Hub
{
View IVM’s Configuration for Spoke
5. Click the menu options to verify that all settings are correct.
6. Select the tunnel and click Deploy.
IVM deploys the tunnel configuration to the hub device of the tunnel.
Importing IPsec tunnels from a file
You can import IPsec tunnels from a file to IVM. The file contains the hub and spoke information that is
needed for tunnel establishment.