H3c-technologies H3C SecPath F1000-E Manual de usuario Pagina 179

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 182
  • Tabla de contenidos
  • SOLUCIÓN DE PROBLEMAS
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 178
15
# Configure an ACL.
[DeviceB] acl number 3101
[DeviceB-acl-adv-3101] rule 0 permit ip source 192.168.0.0 0.0.0.255 destination
172.16.0.0 0.0.0.255
[DeviceB-acl-adv-3101] quit
# Configure an IKE proposal.
[DeviceB] ike proposal 1
[DeviceB-ike-proposal-1] authentication-algorithm sha
[DeviceB-ike-proposal-1] authentication-method pre-share
[DeviceB-ike-proposal-1] encryption-algorithm 3des-cbc
[DeviceB-ike-proposal-1] dh group2
# Configure an IKE peer.
[DeviceB] ike peer peer
[DeviceB-ike-peer-peer] exchange-mode aggressive
[DeviceB-ike-peer-peer] pre-shared-key abc
[DeviceB-ike-peer-peer] id-type name
[DeviceB-ike-peer-peer] remote-name devicea
[DeviceB-ike-peer-peer] remote-address 100.1.1.1
[DeviceB-ike-peer-peer] nat traversal
[DeviceB-ike-peer-peer] quit
# Create an IPsec proposal named prop.
[DeviceB] ipsec proposal prop
[DeviceB-ipsec-proposal-prop] encapsulation-mode tunnel
[DeviceB-ipsec-proposal-prop] transform esp
[DeviceB-ipsec-proposal-prop] esp encryption-algorithm 3des
[DeviceB-ipsec-proposal-prop] esp authentication-algorithm sha1
[DeviceB-ipsec-proposal-prop] quit
# Create an IPsec policy, specifying to set up SAs through IKE negotiation.
[DeviceB] ipsec policy policy 10 isakmp
# Configure the IPsec policy to reference the IKE peer.
[DeviceB-ipsec-policy-isakmp-policy-10] ike-peer peer
# Configure the IPsec policy to reference ACL 3101.
[DeviceB-ipsec-policy-isakmp-policy-10] security acl 3101
# Configure the IPsec policy to reference IPsec proposal prop.
[DeviceB-ipsec-policy-isakmp-policy-10] proposal prop
[DeviceB-ipsec-policy-isakmp-policy-10] quit
# Create a dialer rule.
[DeviceB] dialer-rule 1 ip permit
# Create interface Dialer 0 and perform relative configurations, using the username and password
assigned by the ISP for dial and PPP authentication.
[DeviceB] interface dialer 0
[DeviceB-Dialer0] link-protocol ppp
[DeviceB-Dialer0] ppp pap local-user test password simple 123456
[DeviceB-Dialer0] ip address ppp-negotiate
[DeviceB-Dialer0] dialer user 1
Vista de pagina 178
1 2 ... 174 175 176 177 178 179 180 181 182

Comentarios a estos manuales

Sin comentarios