IPsec Scenarios on OA-700
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
795
Alcatel-Lucent
Beta
Beta
CLI Configuration Guide
The above can be achieved in the following way:
ALU(config)# match-list tunnel
ALU(config-match-list tunnel)# 1 ip prefix 10.91.0.0/24
prefix 10.0.0.0/24
ALU(config)# crypto map cryp-tunnel ipsec-ike default
ALU(config-crypto-map-cryp-tunnel)# match tunnel
ALU(config)# match-list nxt-tunnel
ALU(config-match-list tunnel)# 2 ip prefix 192.168.0.0/24
prefix 10.0.0.0/24
ALU(config)# crypto map cryp-nxt-tunnel ipsec-ike default
ALU(config-crypto-map-cryp-nxt-tunnel)# match nxt-tunnel
With respect to editing a match-list within a crypto map, consider the following
scenarios:
C
ASE
(
I
) D
ELETION
OF
THE
M
ATCH
-
LIST
U
SED
BY
A
C
RYPTO
M
AP
Match-list cannot be deleted if it is attached to a crypto map.
C
ASE
(
II
) D
ELETION
OF
THE
R
ULE
IN
A
M
ATCH
-
LIST
U
SED
BY
A
C
RYPTO
M
AP
A rule in the match-list cannot be deleted if the match-list is attached to a crypto
map.
C
ASE
(
III
) M
ODIFYING
THE
R
ULE
W
ITHIN
THE
M
ATCH
-
LIST
U
SED
BY
A
C
RYPTO
M
AP
If a rule in the match-list which is connected to the crypto map is modified, the
tunnel goes down and the SPD is modified. Tunnel will come up again for the
modified SPD. The modified rule should satisfy IPsec match-list criteria.
C
ASE
(
IV
) A
DDING
AN
E
XTRA
R
ULE
TO
THE
M
ATCH
-
LIST
U
SED
BY
A
C
RYPTO
M
AP
An extra rule cannot be added to a match-list if it is attached to a crypto map.
Summary of Contents for OmniAccess 700
Page 38: ...Left running head Chapter name automatic 12 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 176: ...Left running head Chapter name automatic 150 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 260: ...Left running head Chapter name automatic 234 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 434: ...Left running head Chapter name automatic 408 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 464: ...Left running head Chapter name automatic 438 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 638: ...Left running head Chapter name automatic 612 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 940: ...Left running head Chapter name automatic 914 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 1002: ...Left running head Chapter name automatic 976 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 1120: ...Left running head Chapter name automatic 2 Beta Beta CLI Configuration Guide Alcatel Lucent ...