No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Interoperation Configuration Guide

AR Router

This document provides cases for connecting AR enterprise routers to devices of other vendors.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Verification

Verification

  1. Run the display ike sa and show crypto isakmp sa commands on the Spoke and Hub. The command output shows that SAs in phase 1 and phase 2 have been successfully established (Spoke1 is used as an example).
    [Spoke1] display ike sa 
          Conn-ID      Peer           VPN    Flag(s)     Phase 
      --------------------------------------------------------- 
           8          1.1.1.10         0     RD|ST         2 
           6          1.1.1.10         0     RD|ST         1 
      Flag Description:                                                              
      RD--READY ST--STAYALIVE RL--REPLACED FD--FADING TO--TIMEOUT              
      HRT--HEARTBEAT LKG--LAST KNOWN GOOD SEQ NO. BCK--BACKED UP

    An IPSec tunnel has been successfully established between Spoke1 and the Hub to protect traffic exchanged between them.

  2. Ping the IP address of 10.1.2.1 of Spoke2 from Spoke1, and run the display nhrp peer all command on the Spoke. The command output displays NHRP peer entries (Spoke1 is used as an example).
    [Spoke1] display nhrp peer all 
    ------------------------------------------------------------------------------- 
    Protocol-addr Mask  NBMA-addr       NextHop-addr    Type         Flag 
    ------------------------------------------------------------------------------- 
    10.2.1.1        32    1.1.1.10        10.2.1.1      static        hub 
    ------------------------------------------------------------------------------- 
    Tunnel interface: Tunnel0/0/0 
    Created time    : 05:13:06 
    Expire time     : -- 
    ------------------------------------------------------------------------------- 
    Protocol-addr Mask  NBMA-addr       NextHop-addr    Type         Flag 
    ------------------------------------------------------------------------------- 
    10.2.1.3        32    1.1.3.10        10.2.1.3       dynamic      route tunnel 
    ------------------------------------------------------------------------------- 
    Tunnel interface: Tunnel0/0/0 
    Created time    : 00:00:31 
    Expire time     : 01:59:29 
    ------------------------------------------------------------------------------- 
    Protocol-addr Mask  NBMA-addr       NextHop-addr    Type         Flag 
    ------------------------------------------------------------------------------- 
    10.2.1.2        32    1.1.2.10        10.2.1.2       dynamic      local 
    ------------------------------------------------------------------------------- 
    Tunnel interface: Tunnel0/0/0 
    Created time    : 00:00:31 
    Expire time     : 01:59:29 
     
    Number of nhrp peers: 3

    The Hub and Spoke can learn routes to each other, and DSVPN tunnels have been successfully established.

  3. After Spokes communicate, run the display ike sa command on the Spokes. The command output shows that SAs in phase 1 and phase 2 have been successfully established (Spoke1 is used as an example).
    [Spoke1] display ike sa 
          Conn-ID      Peer           VPN    Flag(s)     Phase 
      ---------------------------------------------------------  
           22         1.1.1.3          0     RD|ST         2 
           15         1.1.1.3          0     RD|ST         1 
           8          1.1.1.10         0     RD|ST         2 
           6          1.1.1.10         0     RD|ST         1 
     
      Flag Description:                                                              
      RD--READY ST--STAYALIVE RL--REPLACED FD--FADING TO--TIMEOUT              
      HRT--HEARTBEAT LKG--LAST KNOWN GOOD SEQ NO. BCK--BACKED UP

    An IPSec tunnel has been successfully established between Spokes to protect traffic exchanged between them.

Translation
Download
Updated: 2019-05-17

Document ID: EDOC1100034005

Views: 23456

Downloads: 459

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next