3Com 3C13636 Configuration Manual page 1139

3Com Router 3000 Ethernet Family
Configuration Guide
[3Com] ipsec policy map1 10 isakmp
# Reference IPSec proposal.
[3Com-ipsec-policy-isakmp-map1-10] proposal tran1
# Reference access control list.
[3Com-ipsec-policy-isakmp-map1-10] security acl 3101
# Reference the IKE peer.
[3Com-ipsec-policy-isakmp-map1-10] ike peer peer
# Return to system view.
[3Com-ipsec-policy-isakmp-map1-10] quit
# Enter serial interface view.
[3Com] interface serial 2/0/1
# Configure serial interface IP address.
[3Com-Serial2/0/1] ip address 202.38.163.1 255.0.0.0
# Apply IPSec policy group on serial interface.
[3Com-Serial2/0/1] ipsec policy map1
# Return to system view.
[3Com-Serial2/0/1] quit
2) Configure Router B
# Configure an access control list, specifying data flow from sub network10.1.2.x to
sub-network 10.1.1.x.
[3Com] acl number 3101
[3Com-acl-adv-3101] rule permit ip source 10.1.2.0 0.0.0.255 destination
10.1.1.0 0.0.0.255
[3Com-acl-adv-3101] rule deny ip source any source any
# Configure the static route to PC A.
[3Com] ip route-static 10.1.1.0 255.255.255.0 202.38.163.1
# Establish IPSec proposal, and the name is tran1.
[3Com] ipsec proposal tran1
# Packet encapsulation format is tunnel mode.
[3Com-ipsec-proposal-tran1] encapsulation-mode tunnel
# Security protocol is ESP.
[3Com-ipsec-proposal-tran1] transform esp
# Select algorithms.
[3Com-ipsec-proposal-tran1] esp encryption-algorithm des
[3Com-ipsec-proposal-tran1] esp authentication-algorithm sha1
3Com Corporation
7-35
Chapter 7 IPSec Configuration