Motorola BSR 2000, Configuration And Management Manual

Page: 414 / 650

BSR 2000 Configuration and Management Guide Release 1.0
7-18 MGBI 526360-001-00 Rev. B
string
is the name of the Pre-shared Key which is between 1 to 128
characters.
3. Repeat Step 2 if more Pre-shared Key IP addresses must be configured or go to
the next step.
4. Issue the show ipsec spd preshared-key to verify the SPD pre-shared key
configuration.
In the following example, the IP address of the Call Management Server/Gate
Controller or Call Management Server/Policy Server is 10.1.40.63 with the
Pre-shared Key “PACKETCABLE” and the IP address of the Record Keeping
Server is 10.1.40.70 with the Pre-shared Key “PACKETCABLE”:
MOT(config-ipsec)#spd preshared-key 10.1.40.63 PACKETCABLE
MOT(config-ipsec)#spd preshared-key 10.1.40.70 PACKETCABLE
MOT(config-ipsec)#show ipsec spd preshared-key
Index Dest IP Address Key Len Key
1 10.1.40.63 11 PACKETCABLE
2 10.1.40.70 11 PACKETCABLE
Specifying the Security Policy Database
The Security Policy Database (SPD) policy is priority based. The lower number index
has a higher priority. The data packets are compared against rules in the SPD policy,
starting with the first index. When a match is found, that rule is applied and no further
comparisons are made against the SPD policy for that data packet.
The SPD adds two rules to the policy during initialization. The first rule forces data
that is specific to the IKE protocol to “bypass”. The second rule, which is the lowest
priority, discards any packet which has not matched a higher priority rule.
Follow these steps to specify the SPD policy:
1. Issue the ipsec command in Global Configuration mode to enter IPSec
Configuration mode.
2. Issue the spd policy command to specify a security policy for the given peers for
the IPSec SPD:
MOT(config-ipsec)#
spd policy <
ipAddr{-ipAddr2|:ipMask}
>
<
ipAddr{-ipAddr2
|:
ipMask}
> <
num
> <
0-65535
> <
0-65535
> { apply transport |
bypass | discard } [ after <
num
>]
where: