Huawei AR1200 Series - Page 319

4. (Optional) Run:
remote-name name
A name is specified for the remote IKE peer.
5. (Optional) Run:
authentication-method { pre-share | rsa-signature }
An authentication method is specified for the IKE proposal.
6. (Optional) Run:
pre-shared-key key
An authenticator is configured for pre-shared key authentication.
7. Run:
quit
The system view is displayed.
8. Run:
interface interface-type interface-number
The interface view is displayed.
9. Run:
ipsec efficient-vpn(interface view) efficient-vpn-name
The Efficient VPN policy is applied to the interface.
Step 2 Perform the following steps on the server router:
1. Run:
system-view
The system view is displayed.
2. Run:
ip pool ip-pool-name
A global address pool is created.
3. Run:
network ip-address [ mask { mask | mask-length } ]
An allocable network segment address is specified for the global address pool.
4. Run:
quit
The system view is displayed.
5. Run:
aaa
The AAA view is displayed.
6. Run:
service-scheme service-scheme-name
A service scheme is created and the service scheme view is displayed.
7. (Optional) Run:
dns ip-address
The IP address of the primary DNS server is specified.
Huawei AR1200 Series Enterprise Routers
Configuration Guide - VPN 5 IPSec Configuration
Issue 01 (2012-04-20) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
308