(Optional) Configuring IPSec VPN Multi-instance

Context

When multiple branches connected to the headquarters network across the Internet using IPSec, you can configure IPSec VPN Multi-instance, thereby isolating traffic of different branches.

Procedure

Run system-view
The system view is displayed.
Run ipsec efficient-vpn efficient-vpn-name [ mode { client | network | network-plus } ]
An Efficient VPN policy is created and the Efficient VPN policy view is displayed.
Run sa binding vpn-instance vpn-instance-name
A VPN instance is bound to an IPSec tunnel.

By default, no VPN instance is bound to an IPSec tunnel.

The VPN instance specified by vpn-instance-name must have been created using the ip vpn-instance command, and must be the same as the VPN instance bound to the ACL that is referenced by an IPSec policy.