Configuring an ipsec proposal, Configuring an ipsec policy template, Configuring an ipsec policy – Panasonic 8000 User Manual

Page 76: Applying an ipsec policy group

Attention! The text in this document has been recognized automatically. To view the original document, you can use the "Original mode".

Nortel Secure Router 8000 Series
Troubleshooting - VAS__________

2 IPSec and IKE troubleshooting

Configuring an IPSec proposal

# Configure the name of the IPSec proposal to tran1 and the encapsulation type to transport
mode to save bandwidth. Configure the proposal to use the security protocol ESP, the
algorithm SHA-1, and the encryption algorithm DES.

[RouterA] ipsec proposal trant

[RouterA-ipsec-proposal-t^rani]

encapsulation-mode transport

transform esp

esp authentication-algorithm shat

esp encryption-algorithm des

Configuring an IPSec policy template

# Configure the name of the IPSec policy template to maptemp and the sequence number to

10. The ACL is not required. Apply the configured IPSec proposal to the policy and specify

the IKE peer.

[RouterA] ipsec policy-template maptemp 10

[RouterA-ipsec-policy-templet^-maptemp-iQ] proposal tranl

[RouterA-ipsec-policy-templet^-maptemp-iQ] ike-peer C

Configuring an IPSec policy

# Configure the name of IPSec policy to map1, the sequence number to 100, and the
negotiation mode to ISAKMP, and use the IPSec policy template maptemp.

[RouterA] ipsec policy mapl 100 isakmp template maptemp

Applying an IPSec policy group

# Apply the IPSec policy map1 on the GE interface.

[RouterA] interface GigabitEthernet 1/0/1

[RouterA-Gigabi^tEtherneti/Q/i] ipsec policy map1

Issue 01.01 (30 March 2009)

Nortel Networks Inc.

2-29