Samsung Ubigate iBG2016, Руководство по настройке

Страница: 314 / 744

CHAPTER 5. IPSEC
264
© SAMSUNG Electronics Co., Ltd.
Source Address is any, Dest Address is any
Source Port is any, Dest Port is any, Protocol is icmp
Schedule is disabled, Ftp-Filter is disabled
Smtp-Filter is disabled, Http-Filter is disabled
Rpc-Filter is disabled, Nat is disabled
Bytes In 0, Bytes Out 0
Policy with Priority 1024 is enabled, Direction is outbound
Action permit, Traffic is self
Logging is disable
Source Address is any, Dest Address is any
Source Port is any, Dest Port is any, any
Schedule is disabled, Ftp-Filter is disabled
Smtp-Filter is disabled, Http-Filter is disabled
15.
Enable SNMP on the Router router,
Router/configure/crypto/# exit
Router/configure# snmp-server
Router/configure/snmp-server# community public rw
Router/configure/snmp-server# exit
16.
Display SNMP communities.
Router# show snmp communities
Community = public, privilege=rw
17.
Repeat steps 1-16 with suitable modifications on NW2 prior to managing
Router from NW2’s LAN side.
18.
Test the IPSec tunnel for managing the Router router from a host on
NW2’s LAN.
19.
When the SNMP manager starts managing Router from NW2’s LAN,
display the IKE and IPSec SA tables.
Router# show crypto ike sa all
Policy Peer State Bytes Transform
------ ----------- --------- ------ ----------------
NW2 172.16.0.2 SA_MATURE 2020 pre-g1-3des-sha1