Sample configurations
75
OnSite 2800 Series User Manual
6 • VPN configuration
IN MANUAL ToBurg Tunnel no
200.200.200.1 - 1111 - - AES-CBC 128
3622/unlimited 19047/unlimited
OUT MANUAL ToBurg Tunnel no
200.200.200.1 - 2222 - - AES-CBC 128
2857/unlimited 19047/unlimited
Sample configurations
The following sample configurations establish IPsec connections between an OnSite and a Cisco router. To
interconnect two OnSite routers instead, derive the configuration for the second OnSite by doing the follow-
ing modifications:
•
Swap ‘inbound’ and ‘outbound’ settings
•
Adjust the ‘peer’ setting
•
Swap the private networks in the ACL profiles
•
Adjust the IP addresses of the LAN and WAN interfaces
•
Adjust the route for the remote network
IPsec tunnel, DES encryption
OnSite configuration
profile ipsec-transform DES
esp-encryption des-cbc 64
profile ipsec-policy-manual VPN_DES
use profile ipsec-transform DES
session-key inbound esp-encryption 1234567890ABCDEF
session-key outbound esp-encryption FEDCBA0987654321
spi inbound esp 1111
spi outbound esp 2222
peer 200.200.200.1
mode tunnel
profile acl VPN_Out
permit ip 192.168.1.0 0.0.0.255 172.16.0.0 0.0.255.255 ipsec-policy VPN_DES
permit ip any any
profile acl VPN_In
permit esp any any
permit ah any any
permit ip 172.16.0.0 0.0.255.255 192.168.1.0 0.0.0.255
deny ip any any
context ip router
interface LAN
ipaddress 192.168.1.1 255.255.255.0
interface WAN
Содержание OnSite 2800 Series
Страница 112: ...112 Chapter 9 LEDs status and monitoring Chapter contents Status LEDs 113...
Страница 124: ...124 Appendix C Cabling Chapter contents Introduction 125 Serial console 125 Ethernet 10Base T and 100Base T 126...
Страница 132: ...132 Appendix E OnSite 2800 Series factory configuration Chapter contents Introduction 133...
Страница 134: ...134 Appendix F Installation checklist Chapter contents Introduction 135...