Huawei AR1200 Series - Page 347

Figure 5-7 Networking for Establishing an SA Using Efficient VPN in Client Mode
Server
RouterA
Eth1/0/0
60.1.1.1/24
Eth1/0/0
60.1.2.1/24
IPSec Tunnel
Remote
RouterB
PC A
PC B
10.1.1.2/24 10.1.2.2/24
Internet
Configuration Roadmap
The configuration roadmap on RouterA is as follows:
1. Assign an IP address to an interface.
2. Configure a static route.
3. Configure the Efficient VPN policy in client mode.
4. Configure an address for the peer end in IKE negotiation.
5. Configure a pre-shared key.
6. Apply the Efficient VPN policy to the interface.
The configuration roadmap on RouterB is as follows:
1. Assign an IP address to an interface.
2. Configure a static route.
3. Configure the resource attributes to be allocated.
4. Configure the IKE proposal and IKE peer.
5. Configure the IPSec proposal, template policy, and policy group.
6. Apply the policy group to the interface.
Procedure
Step 1 Configure RouterA.
1. Assign an IP address to the interface on RouterA.
<Huawei> system-view
[Huawei] interface ethernet 1/0/0
[Huawei-Ethernet1/0/0] ip address 60.1.1.1 255.255.255.0
[Huawei-Ethernet1/0/0] quit
2. Configure a static route to the remote peer on RouterA. This example assumes that the next
hop address in the route to RouterB is 60.1.1.2.
[Huawei] ip route-static 10.1.2.0 255.255.255.0 60.1.1.2
3. Configure the Efficient VPN policy in client mode.
Huawei AR1200 Series Enterprise Routers
Configuration Guide - VPN 5 IPSec Configuration
Issue 01 (2012-04-20) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
336