Configuration procedure – H3C Technologies H3C SecPath F1000-E User Manual
Page 24
12
Figure 14 Network diagram
Configuration procedure
Before the configuration, make sure Router A and Router B can reach each other.
1.
Configure Router A:
# Configure an IPv4 address for interface GigabitEthernet 0/1.
[RouterA] interface GigabitEthernet 0/1
[RouterA-GigabitEthernet0/1] ip address 10.1.1.1 255.255.255.0
[RouterA-GigabitEthernet0/1] quit
# Configure an IPv4 address for interface GigabitEthernet 0/2, the physical interface of the
tunnel.
[RouterA] interface GigabitEthernet 0/2
[RouterA-GigabitEthernet0/2] ip address 1.1.1.1 255.255.255.0
[RouterA-GigabitEthernet0/2] quit
# Create a tunnel interface Tunnel0.
[RouterA] interface tunnel 0
# Configure an IPv4 address for interface Tunnel0.
[RouterA-Tunnel0] ip address 10.1.2.1 255.255.255.0
# Configure the tunnel encapsulation mode as GRE over IPv4.
[RouterA-Tunnel0] tunnel-protocol gre
# Configure the source address of interface Tunnel0 to be the IP address of GigabitEthernet 0/2.
[RouterA-Tunnel0] source 1.1.1.1
# Configure the destination address of interface Tunnel0 to be the IP address of GigabitEthernet
0/2 on Router B.
[RouterA-Tunnel0] destination 2.2.2.2
[RouterA-Tunnel0] quit
# Configure a static route from Router A through interface Tunnel0 to Group 2.
[RouterA] ip route-static 10.1.3.0 255.255.255.0 tunnel 0
2.
Configure Router B:
# Configure an IPv4 address for interface GigabitEthernet 0/1.
[RouterB] interface GigabitEthernet 0/1
[RouterB-GigabitEthernet0/1] ip address 10.1.3.1 255.255.255.0
[RouterB-GigabitEthernet0/1] quit
# Configure an IPv4 address for interface GigabitEthernet 0/2, the physical interface of the
tunnel.
[RouterB] interface GigabitEthernet 0/2
[RouterB-GigabitEthernet0/2] ip address 2.2.2.2 255.255.255.0
[RouterB-GigabitEthernet0/2] quit
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS