3Com 3C13636 Configuration Manual page 1137

3Com Router 3000 Ethernet Family
Configuration Guide
# Select algorithm.
[3Com-ipsec-proposal-tran1] esp encryption-algorithm des
[3Com-ipsec-proposal-tran1] esp authentication-algorithm sha1
# Return to system view.
[3Com-ipsec-proposal-tran1] quit
# Establish an IPSec policy with negotiation mode as manual.
[3Com] ipsec policy use1 10 manual
# Reference access control list.
[3Com-ipsec-policyl-manual-use1-10] security acl 3101
# Reference the IPSec proposal.
[3Com-ipsec-policyl-manual-use1-10] proposal tran1
# Configure peer address.
[3Com-ipsec-policyl-manual-use1-10] tunnel remote 202.38.163.1
# Configure local end address.
[3Com-ipsec-policyl-manual-use1-10] tunnel local 202.38.162.1
# Configure SPI.
[3Com-ipsec-policyl-manual-use1-10] sa spi outbound esp 54321
[3Com-ipsec-policyl-manual-use1-10] sa spi inbound esp 12345
# Configure key.
[3Com-ipsec-policyl-manual-use1-10] sa string-key outbound esp gfedcba
[3Com-ipsec-policyl-manual-use1-10] sa string-key inbound esp abcdefg
# Return to system view.
[3Com-ipsec-policyl-manual-use1-10] quit
# Enter serial interface view.
[3Com] interface serial 4/1/2
# Configure serial interface IP address.
[3Com-Serial4/1/2] ip address 202.38.162.1 255.0.0.0
# Use IPSec policy group on serial interface,.
[3Com-Serial4/1/2] ipsec policy use1
When the above configuration is completed, the security tunnel between Router A and
Router B is established. The data flow between sub-network 10.1.1.x and sub-network
10.1.2.x will be encrypted before being transmitted
3Com Corporation
7-33
Chapter 7 IPSec Configuration