Accelerated 6330-MX, Manual, Page: 104 / 140

6300-CX Sample Configuration 6300-CX Sample Configuration
Open the configuration profile for the 6350-SR. Under IPSec IPSec , create a new entry titled NPS NPS (the
name is arbitrary), and add your IPSec settings to the new entry. The following settings reflect
the sample setup in the diagram above.
1. Enter in the PSK into the
Pre-shared key Pre-shared key
.
2. Change
Local endpoint -> ID -> ID type Local endpoint -> ID -> ID type
to
Raw Raw
3. Set the local ID in
Local endpoint -> ID -> Raw ID Value Local endpoint -> ID -> Raw ID Value
, e.g.
@6300.
4.
(optional)
Set
Local endpoint -> type Local endpoint -> type
to
Interface Interface
,and set
Local endpoint -> Local endpoint ->
Interface Interface
to
Modem. Modem.
This configures the 63xx-series router to only build the tunnel through
the cellular modem WAN interface. Leaving
Local endpoint -> type Local endpoint -> type
to
Interface Interface
as
Default Default
route route
will allow the tunnel to be built through any available WAN interface.
5. Change
Remote endpoint -> ID -> ID type Remote endpoint -> ID -> ID type
to
Raw Raw
6. Set the remote ID in
Remote Remote endpoint -> ID -> Raw ID Value endpoint -> ID -> Raw ID Value
, e.g.
@nps
.
7. Set the
Remote endpoint -> Hostname Remote endpoint -> Hostname
to the public IP address of the 6350-SR's WAN
Ethernet.
8. Set
IKE -> Mode IKE -> Mode
to
Aggressive mode Aggressive mode
.
9. Set
IKE -> Phase 1 Proposals IKE -> Phase 1 Proposals
and
IKE -> Phase 2 Proposals IKE -> Phase 2 Proposals
to match the IKE settings required
by the 6350-SR. In this example, both proposals are set to 3DES, SHA1, MODP1024.
Under Policies Policies , click Add Add to create a new policy, and enter the following settings:
1. Set Policy -> Local network -> Type Policy -> Local network -> Type to Custom network. Custom network.
2. Set Policy -> Local network -> Custom network Policy -> Local network -> Custom network to the IPv4 network you wish to have on the
LAN side of the 6300-CX. In the sample, this is 172.21.1.0/24
3. Set Policy -> Remote network Policy -> Remote network to the IPv4 network you wish to access through the tunnel. In
the sample, this is 172.20.1.0/24
Accelerated Notices
Page 104 Page 104 6330-MX / 6335-MX