Scenarios Depicting IPsec Nat-traversal
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
801
Alcatel-Lucent
Beta
Beta
CLI Configuration Guide
S
CENARIOS
D
EPICTING
IP
SEC
N
AT
-
TRAVERSAL
Figure 31: IPsec Scenario with NAT-Traversal
When both the IPsec peers Host 1 and Host 2 are behind NAT. Both peers being
NAT-T capable detect NAT during the main mode negotiation and peers switch to
port 4500.
OA700-1
ALU(config)# show match-list
match-list m1
1 ip prefix 10.0.0.0/24 prefix 10.91.0.0/24
!
ALU(config)# interface GigabitEthernet 7/0
ALU(config-if GigabitEthernet7/0)#ip address 202.50.24.2/24
ALU(config-if GigabitEthernet7/0)#crypto-map map1
ALU(config-if GigabitEthernet7/0)#show crypto
crypto ike key secret peer 202.50.24.1
!crypto ike policy default
! proposal sha1-aes128
! ipsec security-association lifetime seconds 28800
! lifetime seconds 86400
! pfs group2
!crypto ipsec transform-set default
! esp-sha1-aes256 esp-sha1-3des esp-md5-aes256 esp-md5-
3des
crypto map map1 ipsec-ike default
peer 202.50.24.1
match m1
transform-set default
pfs group2
! Applied to : GigabitEthernet7/0
interface GigabitEthernet7/0
crypto map map1
top
Summary of Contents for OmniAccess 700
Page 38: ...Left running head Chapter name automatic 12 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 176: ...Left running head Chapter name automatic 150 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 260: ...Left running head Chapter name automatic 234 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 434: ...Left running head Chapter name automatic 408 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 464: ...Left running head Chapter name automatic 438 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 638: ...Left running head Chapter name automatic 612 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 940: ...Left running head Chapter name automatic 914 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 1002: ...Left running head Chapter name automatic 976 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 1120: ...Left running head Chapter name automatic 2 Beta Beta CLI Configuration Guide Alcatel Lucent ...