Accelerated 6330-MX, Руководство пользователя

Страница: 93 / 140

Sample Configuration Sample Configuration
Open the configuration profile for the 6350-SR. Under
IPSec IPSec
, create a new entry titled
VIG VIG
, and
add your IPSec settings to the new entry. The following settings reflect the sample setup in the
diagram above.
1. Enter in the PSK into the Pre-shared key Pre-shared key .
2. (o ptional; required for AT&T VIGs ) In XAUTH client XAUTH client , check the Enable Enable box and enter in the
account, username, and password.
3. Check the Enable MODECFG client Enable MODECFG client box.
4. Change Local Local endpoint -> ID -> ID type endpoint -> ID -> ID type to KeyID KeyID
5. Set the local ID in Local Local endpoint -> ID -> endpoint -> ID -> KEYID ID Value KEYID ID Value
6. (optional) Set Local endpoint -> type Local endpoint -> type to Interface Interface ,and set Local endpoint -> Local endpoint ->
Interface Interface to Modem. Modem. This configures the 63xx-series router to only build the tunnel through
the cellular modem WAN interface. Leaving Local endpoint -> type Local endpoint -> type to Interface Interface as Default Default
route route will allow the tunnel to be built through any available WAN interface.
7. Change
Remote endpoint -> ID -> ID type Remote endpoint -> ID -> ID type
to
IPv4 IPv4
8. Set the IP address of the IPSec server in
Remote endpoint -> Hostname Remote endpoint -> Hostname
and
Remote Remote
endpoint -> ID -> IPv4 ID Value endpoint -> ID -> IPv4 ID Value
. In the example, this is 12.13.14.15
9. Set
IKE -> Mode IKE -> Mode
to
Aggressive mode Aggressive mode
.
10. Set
IKE -> Phase 1 Proposals IKE -> Phase 1 Proposals
and
IKE -> Phase 2 Proposals IKE -> Phase 2 Proposals
to match the IKE settings required
by the IPSec server. In this example, both proposals are set to AES128, SHA1, MOD768.
Under Policies Policies , click Add Add to create a new policy, and enter the following settings:
1. Set Policy -> Local network -> Type Policy -> Local network -> Type to Request a network. Request a network.
2. Set Policy -> Remote network Policy -> Remote network to the IPv4 network you wish to access through the tunnel. In
the sample, this is 10.255.0.0/16
Accelerated Notices
Page 93 Page 93 6330-MX / 6335-MX