Setting Up Sas Between A Router And A Vrrp Standby Group - 3Com 3C13636 Configuration Manual

3Com Router 3000 Ethernet Family
Configuration Guide
[Router-Serial3/0/0] ip address 202.38.162.1 255.255.255.0
# Apply the security policy set on the serial interface.
[Router-Serial0/0/0] ipsec policy map1
[Router-Serial3/0/0] quit
# Configure a static route to the segment 10.1.1.0/24.
[Router] ip route-static 10.1.1.0 255.255.255.0 202.38.163.1

7.4.4 Setting Up SAs Between a Router and a VRRP Standby Group

I. Network requirements
As shown in the following diagram, the headquarters uses the VRRP standby group
formed by Router A and Router B as its default gateway. Router E sets up IPSec SAs
with the virtual address of this VRRP standby group to protect data transmitted
between the headquarters and the branch.
Router C and Router D are access routers of operators. They are not discussed here.
II. Network diagram
Branch Branch
Eth0/0/0:10.0.0.1 Eth0/0/0:10.0.0.1
Router A Router A
Eth1/0/0:11.0.0.1 Eth1/0/0:11.0.0.1
Headquarters Headquarters
Figure 7-5 Set up SAs between a router and a virtual address of a VRRP backup group
12.0.0.1 12.0.0.1
Host B Host B
Eth1/0/0:12.0.0.2 Eth1/0/0:12.0.0.2
Eth0/0/0:13.0.0.4 Eth0/0/0:13.0.0.4
Internet Internet
eth1/0/0:10.0.0.4 eth1/0/0:10.0.0.4
VRRP ID1:10.0.0.5 VRRP ID1:10.0.0.5
VRRP ID2:11.0.0.5 VRRP ID2:11.0.0.5
Host A Host A
3Com Corporation
7-40
Chapter 7 IPSec Configuration
Router E Router E
Eth0/0/0:13.0.0.1 Eth0/0/0:13.0.0.1
Router D Router D
Router C Router C
Eth0/0/0:10.0.0.3 Eth0/0/0:10.0.0.3
Router B Router B
Eth1/0/0:11.0.0.3 Eth1/0/0:11.0.0.3
11.0.0.7 11.0.0.7