338
Task
(Optional.)
Configuring keepalive parameters
(Optional.)
Creating an ADVPN domain
Specify a unique ID for an ADVPN domain.
To create an ADVPN domain:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Create an ADVPN domain
and enter ADVPN domain
view.
vam server advpn-domain
domain-name
[
id
domain-id
]
By default, no ADVPN domain
exists.
Enabling the VAM server
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enable the VAM server.
•
Enable the VAM server for one or all
ADVPN domains:
vam server enable
[
advpn-domain
domain-name
]
•
Enable the VAM server for an ADVPN
domain:
a. vam server advpn-domain
domain-name
[
id
domain-id
]
b. server enable
Use either command.
By default, the VAM
server is disabled.
Configuring a pre-shared key for the VAM server
The pre-shared key is used to generate initial encryption and authentication keys during connection
initialization. It is also used to generate encryption and authentication keys for subsequent packets if
encryption and authentication are needed.
The VAM server must have the same pre-shared key as the clients in the same ADVPN domain. If
they have different pre-shared keys, decryption and authentication will fail, and they cannot establish
a connection.
To configure a pre-shared key for the VAM server:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter ADVPN domain view.
vam server advpn-domain
domain-name
[
id
domain-id
]
N/A
3.
Configure a pre-shared key
for the VAM server.
pre
-
shared
-
key
{
cipher
cipher-string
|
simple
simple-string
}
By default, no pre-shared key
is configured.
