Samsung Ubigate iBG3026, Configuration Manual

Page: 322 / 718

CHAPTER 25. IPSEC
282
© SAMSUNG Electronics Co., Ltd.
Policy with Priority 1024 is enabled, Direction is outbound
Action permit, Traffic is transit
Logging is disable
Source Address is any, Dest Address is any
Source Port is any, Dest Port is any, any
Schedule is disabled, Ftp-Filter is disabled
Smtp-Filter is disabled, Http-Filter is disabled
Rpc-Filter is disabled, Nat is disabled
Max-Connections 1024, Connection-Rate is disabled
Policing is disabled, Bandwidth is disabled
Bytes In 11258, Bytes Out 5813
16.
Repeat steps 1-15 with suitable modifications on NW2 prior to passing
bi-directional traffic.
17.
Test the IPSec tunnel between Router and NW2 by passing traffic from
the 10.0.1.0 network to the 10.0.2.0 network.
18.
After traffic is passed through the tunnel, display the IKE and IPSec SA
tables.
Router# show crypto ike sa all
Policy Peer State Bytes Transform
-------- ---------- -------- ------ ----------------
NW2 172.16.0.2 SA_MATURE 1796 pre-g1-3des-sha1
Router# show crypto ike sa all detail
Crypto Policy name: NW2
Remote ident 172.16.0.2
Peer Address is 172.16.0.2
Transform: 3des, sha1, pre-shared-key
DH Group: group1
Bytes Processed 1796
State is SA_MATURE
Mode is Main
Remaining Time in Sec: 86380
Life Time in Sec: 86400, Life Time in Bytes is
unlimited