3Com 3C13636 Configuration Manual page 1171

3Com Router 3000 Ethernet Family
Configuration Guide
III. Configuration procedure
1) Configure Router A
# Assign a name to the local security gateway.
<RouterA> system-view
[RouterA] ike local-name routera
# Configure an ACL.
[RouterA] acl number 3101
[RouterA-acl-adv-3101]
destination 192.168.0.0 0.0.0.255
[RouterA-acl-adv-3101] quit
# Configure an IKE proposal.
[RouterA] ike proposal 1
[RouterA-ike-proposal-1] authentication-algorithm sha
[RouterA-ike-proposal-1] authentication-method pre-share
[RouterA-ike-proposal-1] encryption-algorithm 3des-cbc
[RouterA-ike-proposal-1] dh group2
# Configure an IKE peer.
[RouterA] ike peer peer
[RouterA-ike-peer-peer] exchange-mode aggressive
[RouterA-ike-peer-peer] pre-shared-key abc
[RouterA-ike-peer-peer] id-type name
[RouterA-ike-peer-peer] remote-name routerb
[RouterA-ike-peer-peer] nat traversal
[RouterA-ike-peer-peer] quit
# Create IPSec proposal prop.
[RouterA] ipsec proposal prop
[RouterA-ipsec-proposal-prop] encapsulation-mode tunnel
[RouterA-ipsec-proposal-prop] transform esp
[RouterA-ipsec-proposal-prop] esp encryption-algorithm 3des
[RouterA-ipsec-proposal-prop] esp authentication-algorithm sha1
[RouterA-ipsec-proposal-prop] quit
# Create an IPSec policy and specify to set up SAs through IKE negotiation.
[RouterA] ipsec policy policy 10 isakmp
# Reference the IKE peer named peer in the IPSec policy.
[RouterA-ipsec-policy-isakmp-policy-10] ike-peer peer
# Reference ACL 3101 in the IPSec policy.
[RouterA-ipsec-policy-isakmp-policy-10] security acl 3101
# Reference the IPSec proposal prop in the IPSec policy.
rule 0 permit ip
3Com Corporation
8-18
Chapter 8 IKE Configuration
source 172.16.0.0 0.0.0.255