Huawei AR1200 Series Configuration Guide

#
ip route-static 10.1.1.0 255.255.255.0 202.138.162.2
#
interface Ethernet1/0/0
ip address 202.138.162.1 255.255.255.0
ipsec policy use1
#
return
5.8.4 Example for Establishing an IPSec Tunnel Using an IPSec
Tunnel Interface
An IPSec tunnel can be established using an IPSec tunnel interface. This method simplifies the
IPSec configuration, reduces costs between devices on the IPSec network, and makes service
application flexible.
Networking Requirements
As shown in Figure 5-6, an IPSec tunnel is established between RouterA and RouterB to protect
traffic on the IPSec tunnel interface. The IPSec tunnel uses the AH-ESP protocol, 3DES
encryption algorithm, and SHA-1 authentication algorithm.
Figure 5-6 Networking diagram for establishing an IPSec tunnel using the IPSec tunnel interface
RouterB
RouterA
10.1.1.2/24
10.1.2.2/24
Eth1/0/0
Eth1/0/0
Internet
202.138.163.1/24 202.138.162.1/24
Network A
Network B
Tunnel0/0/0
192.168.1.1/24
Tunnel0/0/0
192.168.1.2/24
IPSec Tunnel
Configuration Roadmap
The configuration roadmap is as follows:
1. Assign IP addresses to interfaces.
2. Configure static routes to peers.
3. Configure IKE proposals.
4. Specify the local IDs and IKE peers required in IKE negotiation.
5. Configure IPSec proposals.
6. Configure IPSec profiles and bind the IPSec proposals and IKE peers to the IPSec profiles.
7. Apply the IPSec profiles to the IPSec tunnel interfaces.
Huawei AR1200 Series Enterprise Routers
Configuration Guide - VPN 5 IPSec Configuration
Issue 01 (2012-04-20) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
331

Huawei AR1200 Series Specifications

General

Brand	Huawei
Model	AR1200 Series
Category	Network Router
Language	English