3Com 3C13636 Configuration Manual page 1172

3Com Router 3000 Ethernet Family
Configuration Guide
[RouterA-ipsec-policy-isakmp-policy-10] proposal prop
[RouterA-ipsec-policy-isakmp-policy-10] quit
# Assign an IP address to interface Serial 0/0/0.
[RouterA] interface Serial0/0/0
[RouterA-Serial0/0/0] ip address 100.1.1.1 255.255.255.0
[RouterA-Serial0/0/0] ipsec policy policy
[RouterA-Serial0/0/0] quit
# Configure interface Ethernet 0/0/0.
[RouterA] interface Ethernet0/0/0
[RouterA-Ethernet0/0/0] ip address 172.16.0.1 255.255.255.0
[RouterA-Ethernet0/0/0] quit
# Configure a static route to the LAN of the branch.
[RouterA] ip route-static 192.168.0.0 255.255.255.0 Serial0/0/0
2) Configure on Router B
# Assign a name to the local security gateway.
<RouterB> system-view
[RouterB] ike local-name routerb
# Create a dialer rule
[RouterB] dialer-rule 1 ip permit
# Configure an ACL.
[RouterB] acl number 3101
[RouterB-acl-adv-3101]
destination 172.16.0.0 0.0.0.255
[RouterB-acl-adv-3101] quit
# Configure an IKE proposal.
[RouterB] ike proposal 1
[RouterB-ike-proposal-1] authentication-algorithm sha
[RouterB-ike-proposal-1] authentication-method pre-share
[RouterB-ike-proposal-1] encryption-algorithm 3des-cbc
[RouterB-ike-proposal-1] dh group2
# Configure an IKE peer.
[RouterB] ike peer peer
[RouterB-ike-peer-peer] exchange-mode aggressive
[RouterB-ike-peer-peer] pre-shared-key abc
[RouterB-ike-peer-peer] id-type name
[RouterB-ike-peer-peer] remote-name routera
[RouterB-ike-peer-peer] remote-address 100.1.1.1
[RouterB-ike-peer-peer] nat traversal
[RouterB-ike-peer-peer] quit
rule 0 permit ip
3Com Corporation
8-19
Chapter 8 IKE Configuration
source 192.168.0.0 0.0.0.255