ELTEX ESR-3100 - Page 173

ESR series service routers.ESR-Series. User manual
173
•
•
•
•
•
1.
External IP addres of Hub — 150.115.0.5;
External IP address of Spoke-1 — 180.100.0.10;
External IP address of Spoke-2 — 140.114.0.4.
IPsec VPN parameters:
IKE:
Diffie-Hellman group: 2;
encryption algorithm: AES128;
authentication algorithm: SHA1.
IPSEC:
encryption algorithm: AES128;
authentication algorithm: SHA1.
Solution:
Hub configuration
Create GRE tunnel:
esr# configure
esr(config)# tunnel gre 5
Specify the IP address of the interface bordering the ISP:
esr(config-gre)# local address 150.115.0.5
Specify MTU value:
esr(config-gre)# mtu 1416
Specify ttl value:
esr(config-gre)# ttl 16
Specify IP address of GRE tunnel:
esr(config-gre)# ip address 10.10.0.5/24
Switch the GRE tunnel into multipoint mode to be able to connect to multiple points:
esr(config-gre)# multipoint