IP Security - Virtual Private Network
Left running head:
Chapter name (automatic)
816
Beta
Beta
CLI Configuration Guide
Alcatel-Lucent
O
N
OA-700
a) IPsec VPN configuration: Configure preshared key, IKE policy, Transform Set.
ALU-1(config)# crypto ike key top_secret1612 peer 2.2.2.3
ALU-1(config)# crypto ike policy IKE1
ALU-1(config-ike-pollicy-test1)#proposal md5-des
ALU-1(config-ike-pollicy-test1)#ipsec security-association
lifetime seconds 30000
ALU-1(config-ike-pollicy-test1)#lifetime seconds 86400
ALU-1(config-ike-pollicy-test1)#pfs group2
ALU-1(config)# crypto ipsec transform-set TS1 esp-md5-des
b) Configure IPsec Profile
ALU(config)# crypto ipsec profile PF1
ALU(ipsec-profile-PF1)# ike-policy IKE1
ALU(ipsec-profile-PF1)# transform-set TS1
ALU(ipsec-profile-PF1)# pfs group2
c) Configure an interface
ALU-1(config)# interface GigabitEthernet7/1
ALU(config-if GigabitEthernet7/1)# no shutdown
ALU(config-if GigabitEthernet7/1)# ip address 2.2.2.1
d) Configure a tunnel interface
ALU-1(config)# interface Tunnel 1
ALU-1(config-if Tunnel1)# no shutdown
ALU-1(config-if Tunnel1)# ip address 192.168.0.1
255.255.255.255
ALU-1(config-if Tunnel1)# mode ipsec
e) Specify tunnel end-points, and attach IPsec Profile to the tunnel interface.
ALU-1(config-if Tunnel1)# mode ipsec
ALU-1(config-if Tunnel1)# tunnel source 2.2.2.1
ALU-1(config-if Tunnel1)# tunnel destination 2.2.2.3
ALU-1(config-if Tunnel1)# ipsec-profile PF1
O
N
A
LCATEL
-L
UCENT
B
RICK
Consider a VPN Firewall Brick with specific IPsec tunnel configuration with tunnel
source being 2.2.2.3 and tunnel destination as 2.2.2.1.
V
ERIFICATION
WITH
S
HOW
C
OMMANDS
Verify the configuration by using the ‘show crypto’ or ‘show crypto ipsec profile’
command.
Содержание OmniAccess 700
Страница 38: ...Left running head Chapter name automatic 12 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 176: ...Left running head Chapter name automatic 150 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 224: ...Per VLAN Spanning Tree Left running head Chapter name automatic 198 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 258: ...Port Monitoring Left running head Chapter name automatic 232 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 260: ...Left running head Chapter name automatic 234 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 296: ...T1E1 Line Card Left running head Chapter name automatic 270 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 360: ...Point to Point Protocol Left running head Chapter name automatic 334 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 434: ...Left running head Chapter name automatic 408 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 462: ...Common Classifiers Left running head Chapter name automatic 436 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 464: ...Left running head Chapter name automatic 438 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 534: ...Border Gateway Protocol Left running head Chapter name automatic 508 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 638: ...Left running head Chapter name automatic 612 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 762: ...Filter and Firewall Left running head Chapter name automatic 736 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 890: ...Transparent Firewall Left running head Chapter name automatic 864 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 940: ...Left running head Chapter name automatic 914 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 1000: ...Quality of Service Left running head Chapter name automatic 974 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 1002: ...Left running head Chapter name automatic 976 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 1044: ...DNS Domain Name Service Client Left running head Chapter name automatic 1018 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 1046: ...Left running head Chapter name automatic 1020 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 1058: ...Left running head Chapter name automatic 1032 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 1074: ...Lifeline Left running head Chapter name automatic 1048 Beta Beta CLI Configuration Guide Alcatel Lucent line con 0 end ...
Страница 1076: ...Left running head Chapter name automatic 1050 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 1118: ...Web Cache Server Left running head Chapter name automatic 1092 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 1120: ...Left running head Chapter name automatic 2 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 1140: ...QoS Values and Mnemonics Left running head Chapter name automatic 22 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Страница 1156: ...IPsec Interoperability of OA 700 Left running head Chapter name automatic 38 Beta Beta CLI Configuration Guide Alcatel Lucent ...