216
[RouterB-ipsec-policy-isakmp-policy-10] quit
# Create a dialer rule.
[RouterB] dialer-rule 1 ip permit
# Configure dialer interface Dialer 0. Use the username and password assigned by the ISP for
dial and PPP authentication.
[RouterB] interface dialer 0
[RouterB-Dialer0] link-protocol ppp
[RouterB-Dialer0] ppp pap local-user test password simple 123456
[RouterB-Dialer0] ip address ppp-negotiate
[RouterB-Dialer0] dialer user 1
[RouterB-Dialer0] dialer-group 1
[RouterB-Dialer0] dialer bundle 1
[RouterB-Dialer0] ipsec policy policy
[RouterB-Dialer0] mtu 1492
[RouterB-Dialer0] quit
# Configure a static route to the headquarters LAN.
[RouterB] ip route-static 172.16.0.0 255.255.255.0 dialer 0
# Configure interface Ethernet 1/1.
[RouterB] interface ethernet 1/1
[RouterB-Ethernet1/1] tcp mss 1450
[RouterB-Ethernet1/1] ip address 192.168.0.1 255.255.255.0
[RouterB-Ethernet1/1] quit
# Create a virtual Ethernet interface, and create a PPPoE session that uses dialer bundle 1 on
the interface.
[RouterB] interface virtual-ethernet 0
[RouterB-Virtual-Ethernet0] pppoe-client dial-bundle-number 1
[RouterB-Virtual-Ethernet0] mac-address 0011-0022-0012
# Map the virtual Ethernet interface to a PVC on interface ATM 1/0.
[RouterB] interface atm 1/0
[RouterB-Atm1/0] pvc 0/100
[RouterB-atm-pvc-Atm1/0-0/100] map bridge virtual-ethernet 0
[RouterB-atm-pvc-Atm1/0-0/100] quit
Troubleshooting IKE
When you configure parameters to establish an IPsec tunnel, enable IKE error debugging to locate
configuration problems:
<Router> debugging ike error
Invalid user ID
Symptom
Invalid user ID.
Analysis
In IPsec, user IDs identify data flows and set up different IPsec tunnels for different data flows. The IP
address and username of a user are used as the user ID.
The following is the debugging information:
To Next Page
Loading...
Need help?
General
