AudioCodes Mediant 500L MSBR, Руководство по настройке

Страница: 34 / 74

Mediant MSBRs 34 Document #: LTRT-31828
Security Setup
If configuration requires two devices connected to the Corporate HQ device, then instead of
the previous addition to the device, the following configuration needs to be applied to the
Corporate HQ device:
access-list ipsec permit ip 10.0.2.0 0.0.0.255 192.168.2.0
0.0.0.255
crypto map MAP1 2 ipsec-isakmp
set peer 180.1.100.40
set transform-set crypto_set1
set security-association lifetime seconds 28000
match address ipsec
exit
crypto isakmp key P@ssw0rd address 180.1.100.21
The above configuration assumes that the third router's GigabitEthernet 0/0 address is
180.1.100.40.
Configuration of the third device is as follows:
interface gig 0/0
ip address 180.1.100.40
access-list ipsec permit ip 10.0.2.0 0.0.0.255 192.168.2.0
0.0.0.255
crypto isakmp policy 1
encryption aes 128
authentication pre-share
hash sha
group 2
lifetime 3600
exit
crypto ipsec transform-set crypto_set1 esp-aes 128 esp-sha-hmac
mode tunnel
exit
crypto map MAP1 1 ipsec-isakmp
set peer 180.1.100.21
set transform-set crypto_set1
set security-association lifetime seconds 28000
match address ipsec
exit
crypto isakmp key P@ssw0rd address 180.1.100.21
interface GigabitEthernet 0/0
crypto map MAP1