AudioCodes Mediant 500L MSBR, Руководство по настройке

Страница: 49 / 74

Configuration Guide 7. IPSec Tunneling
Version 7.2 49 Security Setup
7.1.4 Configuring IPSec with IKEv2
The MSBR supports Internet Key Exchange (IKE) version 2. With IKEv2, the MSBR supports
configuring the peer by IP address or FQDN.
For the identity of the IKEv2 peer, the MSBR supports:

IP address

Email

FQDN
7.1.4.1 Configuration Example
This configuration example is based on the following topology:
The IP address of the "MSBR HQ" is constant (fixed), while the IP address of the "MSBR
Branch" may be dynamic and change every time the interface PPPoE 0 reconnects. In this
scenario, the identity of the MSBR Branch should therefore, not be by IP address because it
changes; instead, it should be by FQDN or email address.
Configuration of MSBR Branch:
configure data
access-list ipsec permit ip 192.168.0.0 0.0.0.255
192.168.100.0 0.0.0.255 log
access-list all_but_ipsec deny ip 192.168.0.0 0.0.0.255
192.168.100.0 0.0.0.255 log
access-list all_but_ipsec permit ip any any log
crypto isakmp obscured-key Vhc2aWtpb2lr address 82.80.170.113
crypto isakmp identity fqdn home.timg.pro
crypto isakmp policy 1
encr aes 256
authentication pre-share
hash sha
group 5
lifetime 3600