To Next Page

To Previous Page

198

[RouterA-ipsec-policy-isakmp-map1-10] ike-peer peer

# Enable dynamic IPsec RRI and use 1.1.1.2 as the next hop of the static route.

[RouterA-ipsec-policy-isakmp-map1-10] reverse-route remote-peer 1.1.1.2

[RouterA-ipsec-policy-isakmp-map1-10] quit

# Apply IPsec policy map1 to interface Ethernet 1/1.

[RouterA] interface ethernet 1/1

[RouterA-Ethernet1/1] ipsec policy map1

[RouterA-Ethernet1/1] quit

3. Configure Router B:

# Configure ACL 3101 to identify traffic from subnet 10.5.5.0/24 to subnet 10.4.4.0/24.

<RouterB> system-view

[RouterB] acl number 3101

[RouterB-acl-adv-3101] rule permit ip source 10.5.5.0 0.0.0.255 destination 10.4.4.0

0.0.0.255

[RouterB-acl-adv-3101] quit

# Configure a static route to subnet 10.4.4.0/24.

[RouterB] ip route-static 10.4.4.0 255.255.255.0 1.1.1.1

# Create IPsec transform set tran1.

[RouterB] ipsec transform-set tran1

# Set the packet encapsulation mode to tunnel.

[RouterB-ipsec-transform-set-tran1] encapsulation-mode tunnel

# Use ESP as the security protocol.

[RouterB-ipsec-transform-set-tran1] transform esp

# Use DES as the encryption algorithm and SHA1-HMAC-96 as the authentication algorithm.

[RouterB-ipsec-transform-set-tran1] esp encryption-algorithm des

[RouterB-ipsec-transform-set-tran1] esp authentication-algorithm sha1

[RouterB-ipsec-transform-set-tran1] quit

# Create IKE peer peer.

[RouterB] ike peer peer

# Set the pre-shared key.

[RouterB-ike-peer-peer] pre-shared-key abcde

# Specify the IP address of the peer security gateway.

[RouterB-ike-peer-peer] remote-address 1.1.1.1

[RouterB-ike-peer-peer] quit

# Create an IPsec policy that uses IKE.

[RouterB] ipsec policy use1 10 isakmp

# Reference ACL 3101 to identify the protected traffic.

[RouterB-ipsec-policy-isakmp-use1-10] security acl 3101

# Reference IPsec transform set tran1.

[RouterB-ipsec-policy-isakmp-use1-10] transform-set tran1

# Reference IKE peer peer.

[RouterB-ipsec-policy-isakmp-use1-10] ike-peer peer

[RouterB-ipsec-policy-isakmp-use1-10] quit

# Apply IPsec policy use1 to interface Ethernet 1/1.

[RouterB] interface ethernet 1/1

[RouterB-Ethernet1/1] ipsec policy use1

4. Verify the configuration:

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English

HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

Table of Contents

Other manuals for HPE FlexNetwork MSR Series

Questions and Answers:

HPE FlexNetwork MSR Series Specifications

Related product manuals