H3C Technologies H3C SecPath F1000-E User Manual

Page 179

# Configure an ACL.

[DeviceB] acl number 3101

[DeviceB-acl-adv-3101] rule 0 permit ip source 192.168.0.0 0.0.0.255 destination

172.16.0.0 0.0.0.255

[DeviceB-acl-adv-3101] quit

# Configure an IKE proposal.

[DeviceB] ike proposal 1

[DeviceB-ike-proposal-1] authentication-algorithm sha

[DeviceB-ike-proposal-1] authentication-method pre-share

[DeviceB-ike-proposal-1] encryption-algorithm 3des-cbc

[DeviceB-ike-proposal-1] dh group2

# Configure an IKE peer.

[DeviceB] ike peer peer

[DeviceB-ike-peer-peer] exchange-mode aggressive

[DeviceB-ike-peer-peer] pre-shared-key abc

[DeviceB-ike-peer-peer] id-type name

[DeviceB-ike-peer-peer] remote-name devicea

[DeviceB-ike-peer-peer] remote-address 100.1.1.1

[DeviceB-ike-peer-peer] nat traversal

[DeviceB-ike-peer-peer] quit

# Create an IPsec proposal named prop.

[DeviceB] ipsec proposal prop

[DeviceB-ipsec-proposal-prop] encapsulation-mode tunnel

[DeviceB-ipsec-proposal-prop] transform esp

[DeviceB-ipsec-proposal-prop] esp encryption-algorithm 3des

[DeviceB-ipsec-proposal-prop] esp authentication-algorithm sha1

[DeviceB-ipsec-proposal-prop] quit

# Create an IPsec policy, specifying to set up SAs through IKE negotiation.

[DeviceB] ipsec policy policy 10 isakmp

# Configure the IPsec policy to reference the IKE peer.

[DeviceB-ipsec-policy-isakmp-policy-10] ike-peer peer

# Configure the IPsec policy to reference ACL 3101.

[DeviceB-ipsec-policy-isakmp-policy-10] security acl 3101

# Configure the IPsec policy to reference IPsec proposal prop.

[DeviceB-ipsec-policy-isakmp-policy-10] proposal prop

[DeviceB-ipsec-policy-isakmp-policy-10] quit

# Create a dialer rule.

[DeviceB] dialer-rule 1 ip permit

# Create interface Dialer 0 and perform relative configurations, using the username and password
assigned by the ISP for dial and PPP authentication.

[DeviceB] interface dialer 0

[DeviceB-Dialer0] link-protocol ppp

[DeviceB-Dialer0] ppp pap local-user test password simple 123456

[DeviceB-Dialer0] ip address ppp-negotiate

[DeviceB-Dialer0] dialer user 1

This manual is related to the following products: