To Next Page

To Previous Page

422 MDS Orbit MCR/ECR Technical Manual MDS 05-6632A01, Rev. F

set interfaces interface Cell filter input IN_UNTRUSTED

set interfaces interface Cell filter output OUT_UNTRUSTED

set interfaces interface Cell cell-config connection-profile PROFILE-1 bearer-config apn <CUSTOMER-APN>

# IKE/IPsec configuration

set services vpn enabled true

set services vpn ike policy SRX240-IKE-POLICY auth-method pre-shared-key

set services vpn ike policy SRX240-IKE-POLICY pre-shared-key test123

set services vpn ike policy SRX240-IKE-POLICY ciphersuite CS1 encryption-algo aes128-cbc

set services vpn ike policy SRX240-IKE-POLICY ciphersuite CS1 mac-algo sha256-hmac

set services vpn ike policy SRX240-IKE-POLICY ciphersuite CS1 dh-group dh14

set services vpn ike peer SRX240-IKE-PEER ike-policy SRX240-IKE-POLICY

set services vpn ike peer SRX240-IKE-PEER local-identity default

set services vpn ike peer SRX240-IKE-PEER peer-endpoint address 172.18.175.40

set services vpn ike peer SRX240-IKE-PEER peer-identity default

set services vpn ike peer SRX240-IKE-PEER role initiator

set services vpn ipsec policy SRX240-IPSEC-POLICY ciphersuite CS1 encryption-algo aes128-cbc

set services vpn ipsec policy SRX240-IPSEC-POLICY ciphersuite CS1 mac-algo sha256-hmac

set services vpn ipsec policy SRX240-IPSEC-POLICY ciphersuite CS1 dh-group dh14

set services vpn ipsec connection SRX240 ike-peer SRX240-IKE-PEER

set services vpn ipsec connection SRX240 ipsec-policy SRX240-IPSEC-POLICY

set services vpn ipsec connection SRX240 local-ip-subnet 192.168.1.0/24

set services vpn ipsec connection SRX240 remote-ip-subnets [ 192.168.2.0/24 ]

set services vpn ipsec connection SRX240 filter input IN_TRUSTED

set services vpn ipsec connection SRX240 filter output OUT_TRUSTED

# Firewall configuration

set services firewall enabled true

set services firewall address-set CELL-IP

set services firewall filter IN_TRUSTED rule 10 match protocol all

set services firewall filter IN_TRUSTED rule 10 actions

set services firewall filter IN_TRUSTED rule 10 actions action accept

set services firewall filter IN_UNTRUSTED rule 1 match protocol icmp

set services firewall filter IN_UNTRUSTED rule 1 actions

set services firewall filter IN_UNTRUSTED rule 1 actions action accept

set services firewall filter IN_UNTRUSTED rule 2 match protocol udp

set services firewall filter IN_UNTRUSTED rule 2 match src-port

set services firewall filter IN_UNTRUSTED rule 2 match src-port services [ dns ]

set services firewall filter IN_UNTRUSTED rule 10 match protocol udp

set services firewall filter IN_UNTRUSTED rule 10 match dst-port

set services firewall filter IN_UNTRUSTED rule 10 match dst-port services [ ike ntp ]

Brand

Model

MDS ORBIT MCR

Brand	GE
Model	MDS ORBIT MCR
Category	Network Router
Language	English

GE MDS ORBIT MCR User Manual

Table of Contents

Questions and Answers:

GE MDS ORBIT MCR Specifications

Related product manuals