Configuration on the AR Router

Updated on 2024-10-11 GMT+08:00

View PDF

Prerequisites

The uplink public network interface GE0/0/8 of the AR router has been configured. Assume that the public IP address of the interface is 1.1.1.1.
The downlink private network interface GE0/0/1 of the AR router has been configured. Assume that the private IP address of the interface is 172.16.0.1.

Procedure

Log in to the web system of the AR router.

An AR651 running V300R019C13SPC200 is used as an example. The web system may vary according to the device model and software version.
Complete basic settings.

Choose Advanced > IP > Routing > Static Route Configuration. In the IPv4 Static Route area, configure static routes to the active EIP and active EIP 2 of the VPN gateway, and click Add, as shown in Figure 1.

Figure 1 Configuring static routes
Configure tunnel interfaces.
1. Choose Advanced > Interface > Logical Interface.
2. Configure two tunnel interfaces and click Add.
  Figure 2 shows the key parameter settings.
  Figure 2 Configuring tunnel interfaces
Configure VPN connections.
1. Choose Advanced > VPN > IPSec > IPSec Policy Management.
2. Configure the IKE and IPsec policies for the two tunnels, as shown in Figure 3 and Figure 4.
  NOTE:
  - When IKEv1 is used for IPsec negotiation, if the traffic hard lifetime is set to 0 on either device, both the local and remote devices disable the traffic timeout function.
  - When IKEv2 is used for IPsec negotiation, if the traffic hard lifetime is set to 0 on a device, this device disables the traffic timeout function.
  Figure 3 Configuring VPN connection 1
  
  Figure 4 Configuring VPN connection 2
Configure BGP.
1. Choose Advanced > IP > Routing > Dynamic Route Configuration > BGP.
2. Toggle on Enable BGP, set AS Number to the BGP ASN of the AR router, set Router ID to the gateway address of the downlink private network interface on the AR router, and click Apply.
3. Configure BGP peers, as shown in Figure 5.
  Figure 5 Configuring BGP peers
4. In the Route Import Configuration area, set Protocol type to Direct.

Parent topic: BGP Routing Mode

Previous topic: Configuration on the Cloud Console

Next topic: Verification

Feedback

Was this page helpful?

Helpful Not helpful

Provide feedback

Thank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.

The system is busy. Please try again later.

Which of the following issues have you encountered?

Content is inconsistent with the product UI

Unclear descriptions

Lack of examples or code

Incorrect steps

Can't find what I need

Lack of best practices

Feedback (optional)

0/500

Select at least one type of issue, and enter your comments or suggestions.

Enter a maximum of 500 characters.

Submit Cancel

For any further questions, feel free to contact us through the chatbot.

Chatbot