To Next Page

To Previous Page

186

Figure 60 Network diagram

Configuration procedure

1. Configure Router A:

# Define an ACL to identify traffic from subnet 10.1.1.0/24 to subnet 10.1.2.0/24.

<RouterA> system-view

[RouterA] acl number 3101

[RouterA-acl-adv-3101] rule permit ip source 10.1.1.0 0.0.0.255 destination 10.1.2.0

0.0.0.255

[RouterA-acl-adv-3101] quit

# Configure an IPsec transform set named tran1.

[RouterA] ipsec transform-set tran1

[RouterA-ipsec-transform-set-tran1] encapsulation-mode tunnel

[RouterA-ipsec-transform-set-tran1] transform esp

[RouterA-ipsec-transform-set-tran1] esp encryption-algorithm des

[RouterA-ipsec-transform-set-tran1] esp authentication-algorithm sha1

[RouterA-ipsec-transform-set-tran1] quit

# Configure an IKE peer named peer.

[RouterA] ike peer peer

[RouterA-ike-peer-peer] pre-shared-key abcde

[RouterA-ike-peer-peer] remote-address 3.3.3.3

[RouterA-ike-peer-peer] quit

# Configure an IPsec policy named map1, specifying to use the IKE negotiation mode.

[RouterA] ipsec policy map1 10 isakmp

[RouterA-ipsec-policy-isakmp-map1-10] transform-set tran1

[RouterA-ipsec-policy-isakmp-map1-10] security acl 3101

[RouterA-ipsec-policy-isakmp-map1-10] ike-peer peer

[RouterA-ipsec-policy-isakmp-map1-10] quit

# Configure a loopback interface.

[RouterA] interface loopback 0

[RouterA-LoopBack0] ip address 1.1.1.1 32

[RouterA-LoopBack0] quit

# Configure IPsec policy group map1 as a shared source interface policy group.

[RouterA] ipsec policy map1 local-address loopback 0

# Apply the shared source interface policy group to interface Ethernet 1/1.

[RouterA] interface ethernet 1/1

[RouterA-Ethernet1/1] ip address 2.2.2.2 24

HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

Other manuals for HPE FlexNetwork MSR Series