5.5.4 Checking the Configuration
After an IPSec tunnel is established using an IPSec tunnel interface, you can view the
configuration of the IPSec profile, IPSec proposal, SA, and IPSec tunnel interface.
Prerequisites
All the configurations of the IPSec tunnel established using an IPSec tunnel interface are
complete.
Procedure
l Run the display ipsec profile [ brief | name profile-name ] command to check the IPSec
profile information.
l Run the display ipsec proposal [ name proposal-name ] command to check the IPSec
proposal information.
l Run the display ipsec sa [ brief | duration | policy policy-name [ seq-number ] | profile
profile-name | peerip peer-ip-address ] command to check the SA information.
l Run the display this command in the interface view to check the configuration of the tunnel
interface.
----End
5.6 Establishing an IPSec Tunnel Using the Efficient VPN
Policy
Using an Efficient VPN policy to establish an IPSec tunnel simplifies the configuration and
reduces manual configuration workload.
5.6.1 Establishing the Configuration Task
Before configuring the Efficient VPN policy, familiarize yourself with the applicable
environment, complete the pre-configuration tasks, and obtain the data required for
configuration. This will help you complete the configuration task quickly and accurately.
Applicable Environment
You must perform a great number of IPSec configurations on two peers to establish an IPSec
tunnel between the peers. The configurations include the authentication and encryption
algorithms used in IKE negotiation, Diffie-Hellman key agreement protocol, and IPSec proposal.
If the network has hundreds of sites, the IPSec configurations on remote devices are complicated.
Huawei provides the Efficient VPN solution, which allows remote branches to easily connect
to the enterprise headquarters and releases enterprise administrators from complex manual
configurations.
Preconfiguration Tasks
Before configuring the Efficient VPN policy, complete the following tasks:
Huawei AR1200 Series Enterprise Routers
Configuration Guide - VPN 5 IPSec Configuration
Issue 01 (2012-04-20) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
306
To Next Page
Loading...
