Generic Routing Encapsulation
Left running head:
Chapter name (automatic)
852
Beta
Beta
CLI Configuration Guide
Alcatel-Lucent
IP
SEC
VPN C
ONFIGURATION
P
ROCESS
O
N
OA700-1
a) Configure a tunnel interface
ALU-1(config)#interface tunnel1
ALU-1(config-if tunnel1)#ip address 192.168.0.1/24
ALU-1(config-if tunnel1)#no shutdown
b) Specify tunnel end-points
ALU-1(config-if tunnel1)#tunnel source 2.2.2.1
ALU-1(config-if tunnel1)#tunnel destination 2.2.2.3
IPS
EC
P
OLICY
C
ONFIGURATION
ON
OA700-1
a) Configure a match-list
ALU-1(config)# match-list tunnel-traffic
ALU-1(config-match-list-tunnel-traffic)#1 gre host 2.2.2.1
host 2.2.2.3
b) Configure an IKE policy
ALU-1(config)# crypto ike policy test
ALU-1(config-ike-pollicy-test)#proposal md5-des
ALU-1(config-ike-pollicy-test)#ipsec security-association
lifetime seconds 28800
ALU-1(config-ike-pollicy-test)#lifetime seconds 86400
ALU-1(config-ike-pollicy-test)#pfs group2
c) Configure an IKE Key
ALU-1(config)#crypto ike key test1234 peer 2.2.2.3
d) Configure a transform set
ALU-1(config)# crypto ipsec transform-set test esp-md5-des
e) Configure a crypto map
ALU-1(config)#crypto map test ipsec-ike test
ALU-1(config-crypto-map-test)#peer 2.2.2.3
ALU-1(config-crypto-map-test)#match tunnel-traffic
ALU-1(config-crypto-map-test)#transform-set test
ALU-1(config-crypto-map-test)#pfs group2
f) Attach crypto map to the interface
ALU(config)# interface GigabitEthernet7/1
ALU(config-if GigabitEthernet7/1)# crypto map test
Summary of Contents for OmniAccess 700
Page 38: ...Left running head Chapter name automatic 12 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 176: ...Left running head Chapter name automatic 150 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 260: ...Left running head Chapter name automatic 234 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 434: ...Left running head Chapter name automatic 408 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 464: ...Left running head Chapter name automatic 438 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 638: ...Left running head Chapter name automatic 612 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 940: ...Left running head Chapter name automatic 914 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 1002: ...Left running head Chapter name automatic 976 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 1120: ...Left running head Chapter name automatic 2 Beta Beta CLI Configuration Guide Alcatel Lucent ...