HUAWEI Firewall Interoperability Configuration Guide for VPN
This document provides the guide for configuring a Huawei firewall to use VPN to communicate with a non-Huawei device.
About This Document
Related Version
This document provides guidance for configuring VPN interconnection on Huawei firewalls. For details about the supported product models and versions, see the Applicable Product Models and Versions sections in this document. Pay attention to the product models and versions when using this document.
In addition, the configurations of different versions of the same product form may be slightly different. If the version you use is inconsistent with that described in this document, the actual situation prevails.
Intended Audience
This document is intended for network administrators who are responsible for configuring and managing Huawei firewalls. You should be familiar with the basics of Ethernet and have extensive network management experience.
Symbol Conventions
The symbols that may be found in this document are defined as follows.
Symbol |
Description |
|---|---|
|
Indicates a hazard with a high level of risk which, if not avoided, will result in death or serious injury. |
|
Indicates a hazard with a medium level of risk which, if not avoided, could result in death or serious injury. |
|
Indicates a hazard with a low level of risk which, if not avoided, could result in minor or moderate injury. |
|
Indicates a potentially hazardous situation which, if not avoided, could result in equipment damage, data loss, performance deterioration, or unanticipated results. NOTICE is used to address practices not related to personal injury. |
|
Supplements the important information in the main text. NOTE is used to address information not related to personal injury, equipment damage, and environment deterioration. |
Command Conventions
The command conventions that may be found in this document are defined as follows.
Convention |
Description |
|---|---|
Boldface |
The keywords of a command line are in boldface. |
Italic |
Command arguments are in italics. |
[ ] |
Items (keywords or arguments) in brackets [ ] are optional. |
{ x | y | ... } |
Optional items are grouped in braces and separated by vertical bars. One item is selected. |
[ x | y | ... ] |
Optional items are grouped in brackets and separated by vertical bars. One item is selected or no item is selected. |
{ x | y | ... } * |
Optional items are grouped in braces and separated by vertical bars. A minimum of one item or a maximum of all items can be selected. |
[ x | y | ... ] * |
Optional items are grouped in brackets and separated by vertical bars. Several items or no item can be selected. |
&<1-n> |
The parameter before the & sign can be repeated 1 to n times. |
# |
A line starting with the # sign is comments. |
GUI Conventions
The GUI conventions that may be found in this document are defined as follows.
Convention |
Description |
|---|---|
Boldface |
Buttons, menus, parameters, tabs, window, and dialog titles are in boldface. For example, click OK. |
> |
Multi-level menus are in boldface and separated by the ">" signs. For example, choose . |
Update History
The update history describes the changes in the document. The latest document contains all the changes in earlier versions.
Updates in Issue 04 (2023-12-18)
The fourth commercial release has the following updates:
- Optimized the original content.
- Added the case of interoperation between firewalls running V600R020C10 and later and AR routers. For details, see IPsec Interoperation Between Huawei Firewalls and Huawei AR Routers (Applicable to Huawei Firewalls Running V600R020C10 and Later Versions).
- Added the case of interoperation between firewalls running V600R020C10 and later and Base stations. For details, see IPsec Interoperation Between Huawei Firewalls and Base Stations (Applicable to Huawei Firewalls Running V600R020C10 and Later Versions).
- Added the case of interoperation between firewalls running V600R007 and Cisco firewalls. For details, see IPSec Interoperation Guide for HUAWEI Firewalls and Cisco Firewalls (Applicable to Huawei Firewalls Running V600R007).
- Added the case of interoperation between firewalls running V600R007 and Fortinet firewalls. For details, see IPSec Interoperation Guide for HUAWEI Firewalls and Fortinet Firewalls (Applicable to Huawei Firewalls Running V600R007).
- Added the case of interoperation between firewalls running V600R007 and H3C firewalls. For details, see IPSec Interoperation Guide for HUAWEI Firewalls and H3C Firewalls (Applicable to Huawei Firewalls Running V600R007).
Updates in Issue 03 (2023-08-01)
The third commercial release has the following updates:
- Optimized the original content.
- Added the case of interoperation between firewalls running V600R020C10 and later and Cisco firewalls. For details, see IPsec Interoperation Between Huawei Firewalls and Cisco Firewalls (Applicable to Huawei Firewalls Running V600R020C10 and later versions).
- Added the case of interoperation between firewalls running V600R020C10 and later and H3C firewalls. For details, see IPsec Interoperation Between Huawei Firewalls and H3C Firewalls (Applicable to Huawei Firewalls Running V600R020C10 and Later Versions).
- Added the case of interoperation between firewalls running V600R020C10 and later and Hillstone firewalls. For details, see IPsec Interoperation Between Huawei Firewalls and Hillstone Firewalls (Applicable to Huawei Firewalls Running V600R020C10 and later versions).
- Added the case of interoperation between firewalls running V600R020C10 and later and Juniper firewalls. For details, see IPsec Interoperation Between Huawei Firewalls and Juniper Firewalls (Applicable to Huawei Firewalls Running V600R020C10 and Later Versions).
- Added the case of interoperation between firewalls running V600R020C10 and later and firewalls running V600R006. For details, see IPsec Interoperation Between Huawei HiSecEngine USG12000 Series Firewalls and Huawei HiSecEngine USG6000E Series Firewalls.
Updates in Issue 02 (2020-04-01)
The second commercial release has the following updates:
- Optimized the original content.
- Added the case of interconnection between the V5 firewall and AR router. For details, see IPSec Interoperation Guide for HUAWEI Firewalls and HUAWEI AR Routers (Applicable to Huawei Firewalls of V5 and Later Versions).
- Added the case of remote access of mobile users on the V5 firewall. For details, see Remote Access of Mobile Users.
- Added the method of using the L2TP VPN terminal software. For details, see Configuring L2TP VPN for Different Types of Devices.
Updates in Issue 01 (2017-07-03)
Initial commercial release.