H3C Technologies H3C SecPath F1000-E - Manual (Page 160)

148
[Router-ipsec-policy-isakmp-policy-10] proposal prop
[Router-ipsec-policy-isakmp-policy-10] quit
# Create a dialer rule.
[Router] dialer-rule 1 ip permit
# Configure dialer interface Dialer 0. Use the username and password assigned by the ISP for dial and
PPP authentication.
[Router] interface dialer 0
[Router-Dialer0] link-protocol ppp
[Router-Dialer0] ppp pap local-user test password simple 123456
[Router-Dialer0] ip address ppp-negotiate
[Router-Dialer0] dialer user 1
[Router-Dialer0] dialer-group 1
[Router-Dialer0] dialer bundle 1
[Router-Dialer0] ipsec policy policy
[Router-Dialer0] mtu 1492
[Router-Dialer0] quit
# Configure a static route to the headquarters LAN.
[Router] ip route-static 172.16.0.0 255.255.255.0 dialer 0
# Configure interface GigabitEthernet 0/1.
[Router] interface GigabitEthernet 0/1
[Router-GigabitEthernet0/1] tcp mss 1450
[Router-GigabitEthernet0/1] ip address 192.168.0.1 255.255.255.0
[Router-GigabitEthernet0/1] quit
# Create a virtual Ethernet interface, and create a PPPoE session that uses dialer bundle 1 on the
interface.
[Router] interface virtual-ethernet 0
[Router-Virtual-Ethernet0] pppoe-client dial-bundle-number 1
[Router-Virtual-Ethernet0] mac-address 0011-0022-0012
# Map the virtual Ethernet interface to a PVC on interface ATM 1/0.
[Router] interface atm 1/0
[Router-Atm1/0] pvc 0/100
[Router-atm-pvc-Atm1/0-0/100] map bridge virtual-ethernet 0
[Router-atm-pvc-Atm1/0-0/100] quit
Troubleshooting IKE
When you configure parameters to establish an IPsec tunnel, enable IKE error debugging to locate
configuration problems:
debugging ike error
Invalid user ID
Symptom
Invalid user ID.