This document provides detailed configuration details to implement a site to site VPN with IPsec on the Comware routing platforms. In my examples, i have used the MSR954 at each end, with support for dynamic IP addressing.
The document covers the following topics as they relate to an IPsec VPN tunnel:
In many cases, the newly released Aruba SD-Branch platform will provide a more complete IPsec solution, including site to multi-site configurations (eg head office to multiple branches). The HPE MSR routers provide the ideal alternative in a more traditional routing platform, if the Aruba SD-Branch solution is not appropriate for some reason. For instance, direct integration with third party IPsec devices or specific protocols, or where cloud managed configurations are not viable.