IP Security - Virtual Private Network
Left running head:
Chapter name (automatic)
906
Beta Beta
OmniAccess 5740 Unified Services Gateway CLI Configuration Guide
Alcatel-Lucent
• Configure IKE policy. See “To Configure an IKE Policy”
• Configure a Transform Set. See “To Configure Transform-set in IPsec”
Step 5: Configure a client profile. See “To Configure a Client Profile”. And,
configure Profile related commands.
• Attach a crypto client object to a client profile. See “To Attach a Client
Object to a Client Profile”
• Attach an IKE policy to a client profile. See “To Attach an IKE Policy to a
Client Profile”
• Attach a transform set to a client profile. See “To Attach a Transform Set
to a Crypto Client Profile”
• Attach PFS group to a client profile. See “To Attach PFS Group to a
Crypto Client Profile”
• Configure SA lifetime for an client profile. See “To Configure SA Lifetime
for a Client Profile”
Step 6: Enter Interface Configuration Mode
ALU(config)# interface <name>
Example:
ALU(config)# interface GigabitEthernet 3/0
ALU(config-if GigabitEthernet3/0)#
Step 7: Administratively bring up the interface
ALU(config-if <interface-name>)# no shutdown
Example:
ALU(config-if GigabitEthernet3/0)# no shutdown
Step 8: Configure IP address for the interface
ALU(config-if <interface-name>)# ip address {<ip-
address subnet-mask>|<ip-address/prefix-length>}
Example:
ALU(config-if GigabitEthernet3/0)# ip address 2.2.2.1/
24
Step 9: Attach the configured client profile to an interface. See “To Attach a Client
Profile to an Interface”