AudioCodes Mediant 500L MSBR, Руководство по настройке

Страница: 45 / 74

Configuration Guide 7. IPSec Tunneling
Version 7.2 45 Security Setup
7.1.3.1.5 Device PKI Configuration Example
The following is an example of the configuration of IPSec using PKI authentication between
two routers using a GRE tunnel. Both devices have an NTP server configured, and
certificates were imported as described in the previous sections.
Figure 7-5: Device PKI Configuration Example
Configuration of MSBR-31 is as follows:
configure data
access-list IPSEC permit gre any any
access-list ALL_BUT_IPSEC deny gre any any
access-list ALL_BUT_IPSEC permit ip any any
crypto isakmp policy 1
encr aes 256
authentication rsa-sig
hash sha
group 5
lifetime 3600
exit
crypto ipsec transform-set crypto_set esp-aes 256 esp-sha-hmac
mode tunnel
exit
crypto map MAP1 1 ipsec-isakmp
set peer 10.4.40.86
set transform-set crypto_set
set security-association lifetime seconds 3600
match address IPSEC
set default-route
exit
interface GigabitEthernet 0/0
ip address 10.31.2.31 255.255.255.0