SRG配置VPN-instance报错

发布时间:  2016-01-22 浏览次数:  200 下载次数:  0
问题描述

 

SRG3240 配置vpn-instance时报错,命令能完整的敲上去,但是最后报功能无法使用。

ip vpn-instance ljapinat
description LJWL DCN Internet private line
route-distinguisher 65000:1119901
#
ip df-unreachables enable
#
undo firewall ipv6 session link-state check
firewall ipv6 statistic system enable
#
dns resolve
#
vlan batch 1 101 3200 3351 3462
#
firewall defend udp-flood fingerprint-hit destination-max-rate 5
firewall defend udp-flood fingerprint-hit source-max-rate 3
#
firewall statistic system enable         
#
pki certificate access-control-policy default permit
#
dns proxy enable
#
license-server domain lic.huawei.com
#
web-manager enable
#
user-manage web-authentication security port 8888
#
vlan 101
description ljvod
vlan 3200
description wuxian_ca_pos
vlan 3351
description ljkefu
vlan 3462
description ljidcmgt
vlan 101
binding vpn-instance ljapinat

[SZX-X-SRG3240-1]firewall zone  vpn-instance  ljapinat name untrust
09:58:37  2016/01/19
 This function don't support VPN-Instance.
[SZX-X-SRG3240-1]firewall zone vpn-instance ljapinat name ljapinat
09:59:51  2016/01/19
 This function don't support VPN-Instance.

解决方案

SRGvpn-instance只能用来做路由隔离,不支持新建vpn-instance的域、域间以及策略等 .

此设备版本为最新的:V1R2C02SPC900 。后续版本有修订。

END