Task
(Optional.)
Configuring keepalive parameters
(Optional.)
Configuring the retry timer
Creating an ADVPN domain
Specify a unique ID for an ADVPN domain.
To create an ADVPN domain:
Step
1.
Enter system view.
2.
Create an ADVPN domain
and enter ADVPN domain
view.
Enabling the VAM server
Step
1.
Enter system view.
2.
Enable the VAM server.
Configuring a pre-shared key for the VAM server
The pre-shared key is used to generate initial encryption and authentication keys during connection
initialization. It is also used to generate encryption and authentication keys for subsequent packets if
encryption and authentication are needed.
The VAM server must have the same pre-shared key as the clients in the same ADVPN domain. If
they have different pre-shared keys, decryption and authentication will fail, and they cannot establish
a connection.
To configure a pre-shared key for the VAM server:
Step
1.
Enter system view.
2.
Enter ADVPN domain view.
3.
Configure a pre-shared key
for the VAM server.
Command
system-view
vam server advpn-domain
domain-name [ id domain-id ]
Command
system-view
•
Enable the VAM server for one or all
ADVPN domains:
vam server enable [ advpn-domain
domain-name ]
•
Enable the VAM server for an ADVPN
domain:
a. vam server advpn-domain
domain-name [ id domain-id ]
b. server enable
Command
system-view
vam server advpn-domain
domain-name [ id domain-id ]
pre-shared-key { cipher
cipher-string | simple simple-string }
338
Remarks
N/A
By default, no ADVPN domain
exists.
Remarks
N/A
Use either command.
By default, the VAM
server is disabled.
Remarks
N/A
N/A
By default, no pre-shared key
is configured.