Samsung Ubigate iBG3026, Configuration Manual

Page: 318 / 718

CHAPTER 25. IPSEC
278
© SAMSUNG Electronics Co., Ltd.
9.
Configure IPSec tunnel to the remote host.
Router# show crypto ipsec policy all
Policy Peer Match Proto Transform
------ ---- ----- ----- ---------
NW2 172.16.0.2 S 10.0.1.0/24/any Any P1 esp-des-sha1-tunl
D 10.0.2.0/24/any P2 esp-aes-sha1-tunl
INNW2 172.16.0.2 S 10.0.2.0/24/any Any P1 esp-des-sha1-tunl
D 10.0.1.0/24/any P2 esp-aes-sha1-tunl
Router# show crypto ipsec policy all detail
Policy name NW2 is enabled, Direction is outbound
Peer Address is 172.16.0.2, Action is Apply
Key Management is Automatic
PFS Group is disabled
Match Address:
Protocol is Any
Source ip
address(ip/mask/port):(10.0.1.0/255.255.255.0/any)
Destination ip
address(ip/mask/port):(10.0.2.0/255.255.255.0/any)
Proposal of priority 1
Protocol: esp
Mode: tunnel
Encryption Algorithm: des
Hash Algorithm: sha1
Lifetime in seconds: 3600
Lifetime in Kilobytes: 4608000
Proposal of priority 2
Protocol: esp
Mode: tunnel
Encryption Algorithm: aes256(key length=256 bits)
Hash Algorithm: sha1
Lifetime in seconds: 3600
Lifetime in Kilobytes: 4608000
Policy name INNW2 is enabled, Direction is inbound
Peer Address is 172.16.0.2, Action is Apply
Key Management is Automatic
PFS Group is disabled
Match Address:
Protocol is Any
Source ip