H3C Technologies H3C Intelligent Management Center - Manual (Page 71)

61
4 Building VPN networks with IVM
This chapter describes using IVM to build IPsec VPN, GRE over IPsec VPN, and DVPN networks in which
the hub and spoke devices have fixed IP addresses assigned by the ISP.
Figure 34 Building a VPN network
The following describes the major steps for building a VPN network:
1. Deploy the IMC platform and IVM.
2. Configure SNMP and Telnet/SSH on the hub and spoke devices.
3. IVM obtains information about hub and spoke devices and assigns configurations to the devices
through PLAT.
4. The hub device and spoke devices establish tunnels over the Internet.
Building an IPsec VPN network
As shown in Figure 35 , the administrator deploys two IPsec tunnels, one between HubA and SpokeA and
the other between HubA and SpokeB, to build an IPsec VPN.