To Next Page

To Previous Page

424 MDS Orbit MCR/ECR Technical Manual MDS 05-6632A01, Rev. F

udp-encap false

in-spi c4bfce67

out-spi ef7c6bd3

ciphersuite AES_CBC-128/HMAC_SHA2_256_128

in-bytes 0

in-packets 0

in-last-use 1619592

out-bytes 0

out-packets 0

out-last-use 0

rekey-time 2704

life-time 3599

install-time 1

local-ts 192.168.1.0/24

remote-ts 192.168.2.0/24

JUNOS 12.1.2

12.1.2.1 Configuration

The configuration below assumes that interface ge-0/0/0 is the external WAN interface and vlan.0 is the

VLAN interface that includes all LAN ports.

# IKE/IPsec configuration

set security ike proposal IKE-PROP-PSK authentication-method pre-shared-keys

set security ike proposal IKE-PROP-PSK dh-group group14

set security ike proposal IKE-PROP-PSK authentication-algorithm sha-256

set security ike proposal IKE-PROP-PSK encryption-algorithm aes-128-cbc

set security ike policy IKE-POLICY-PSK proposals IKE-PROP-PSK

set security ike policy IKE-POLICY-PSK pre-shared-key ascii-text test123

set security ike gateway ORBIT138 ike-policy IKE-POLICY-PSK

set security ike gateway ORBIT138 address 172.18.175.138

set security ike gateway ORBIT138 local-identity inet 172.18.175.40

set security ike gateway ORBIT138 external-interface ge-0/0/0

set security ike gateway ORBIT138 version v2-only

set security ipsec proposal IPSEC-PROP protocol esp

set security ipsec proposal IPSEC-PROP authentication-algorithm hmac-sha-256-128

set security ipsec proposal IPSEC-PROP encryption-algorithm aes-128-cbc

set security ipsec policy IPSEC-POLICY perfect-forward-secrecy keys group14

set security ipsec policy IPSEC-POLICY proposals IPSEC-PROP

set security ipsec vpn ORBIT138 ike gateway ORBIT138

set security ipsec vpn ORBIT138 ike ipsec-policy IPSEC-POLICY

GE MDS ORBIT ECR User Manual

Questions and Answers: