
359
Field Description
Last Connection Error
The most recent error, if any. Possible values include:
•
ERROR_NONE
—No error occurred.
•
ERROR_QM_FSM_ERROR
—State machine error.
•
ERROR_PHASEI_FAIL
—Error occurred in phase 1.
•
ERROR_PHASEI_PROPOSAL_UNMATCHED
—No matching security proposal in
phase 1.
•
ERROR_PHASEII_PROPOSAL_UNMATCHED
—No matching security proposal in
phase 2.
•
ERROR_NAT_TRAVERSAL_ERROR
—NAT traversal error.
•
ERROR_PHASEII_FAIL
—Error occurred in phase 2.
•
ERROR_INVALID_SPI
—SPI error.
•
ERROR_UNKNOWN
—Unknown error.
Table 158
Fields of the IPsec tunnel list
Field Description
Characteristics of Traffic
Characteristics of the IPsec protected traffic, including the source
address/wildcard, destination address/wildcard, protocol, source port, and
destination port.
SPI
Inbound and outbound SPIs, and the security protocols used.
IPsec VPN configuration example
Network requirements
As shown in
, configure an IPsec tunnel between Router A and Router B to protect traffic
between subnet 10.1.1.0/24 and subnet 10.1.2.0/24. Enable IPsec RRI on Router A and specify the next
hop as 2.2.2.2.
Figure 359
Network diagram
Configuring Router A
1.
Assign IP addresses to the interfaces. (Details not shown.)
2.
Configure an IPsec connection:
a.
Select
VPN
>
IPsec VPN
from the navigation tree.
Summary of Contents for MSR SERIES
Page 17: ...xv Documents 835 Websites 835 Conventions 836 Index 838 ...
Page 20: ...3 Figure 3 Initial page of the Web interface ...
Page 42: ...25 Figure 13 Firefox Web browser setting ...
Page 59: ...42 Figure 27 Checking the basic service configuration ...
Page 73: ...56 Figure 35 Sample interface statistics ...
Page 156: ...139 Figure 139 Rebooting the 3G modem ...
Page 168: ...151 Figure 152 Configuring Web server 2 ...
Page 174: ...157 Figure 158 Configure the URL filtering function ...
Page 242: ...225 Figure 233 Enabling the DHCP client on interface Ethernet 0 1 ...
Page 247: ...230 Figure 236 The page for configuring an advanced IPv4 ACL ...
Page 255: ...238 Figure 241 Advanced limit setting ...
Page 298: ...281 e Click Apply 2 Configure Router B in the same way Router A is configured ...
Page 400: ...383 Figure 387 Verifying the configuration ...
Page 405: ...388 ...
Page 523: ...506 Figure 530 Ping configuration page ...
Page 775: ...758 Figure 785 Configuring a jump node ...