service-scheme (Efficient VPN policy view)

Function

The service-scheme command configures a server-end service scheme in an Efficient VPN policy.

The undo service-scheme command deletes a server-end service scheme from an Efficient VPN policy.

By default, no server-end service scheme is configured in an Efficient VPN policy.

Format

service-scheme service-scheme-name

undo service-scheme

Parameters

Parameter	Description	Value
service-scheme-name	Specifies the name of a service scheme on the server end.	The service scheme name must already exist.

Views

Efficient VPN policy view

Default Level

2: Configuration level

Usage Guidelines

In an Efficient VPN scenario, the customer wants to deploy network resources including the DNS domain name, DNS server address, WINS server address, and IP addresses on the server end (headquarters gateway). The server end pushes network resource information to remote ends (branch gateways) to simplify configuration and maintenance of network resources on them.

Remote ends are authorized based on network resource information pushed by the server end or the server-end AAA service scheme specified in an Efficient VPN policy. To use the AAA service scheme, run the service-scheme command to configure a server-end service scheme in an Efficient VPN policy and run the local-id-type command to specify the key-id parameter. Otherwise, the configuration does not take effect.

Example

# Configure the server-end service scheme service in an Efficient VPN policy.

<HUAWEI> system-view
[HUAWEI] ipsec efficient-vpn name mode network
[HUAWEI-ipsec-efficient-vpn-name] service-scheme service