ELTEX ESR-3100 User Manual

ESR series service routers.ESR-Series. User manual
215
•
•
•
•
•
•
•
•
•
1.
9.4.6 Remote Access IPsec VPN configuration example
Objective:
Configure Remote Access IPsec VPN between R1 and R2 using the second IPsec authentication factor,
XAUTH. Configure router R1 as the IPsec VPN server, and router R2 as the IPsec VPN client.
R2 IP address: 120.11.5.1;
R1 IP address: 180.100.0.1;
For IPsec VPN clients:
issue addresses from the subnet pool 192.0.2.0/24
provide access to the LAN subnet 10.0.0.0/16
IKE:
Diffie-Hellman group: 2;
encryption algorithm: 3DES;
authentication algorithm: SHA1.
IPSEC:
encryption algorithm: 3DES;
authentication algorithm: SHA1.
XAUTH:
login: client1;
password: password123.
Solution:
R1 configuration
Configure external network interface and identify its inherence to a security zone:
esr# configure
esr(config)# security zone untrusted
esr(config-zone)# exit
esr(config)# interface gigabitethernet 1/0/1
esr(config-if-gi)# security-zone untrusted
esr(config-if-gi)# ip address 180.100.0.1/24
esr(config-if-gi)# exit
To configure security zones rules, create ISAKMP port profile:
esr(config)# object-group service ISAKMP
esr(config-object-group-service)# port-range 500,4500
esr(config-object-group-service)# exit

ELTEX ESR-3100 Specifications

General

Brand	ELTEX
Model	ESR-3100
Category	Network Router
Language	English