3Com 3C13636 Configuration Manual page 1173

3Com Router 3000 Ethernet Family
Configuration Guide
# Create IPSec proposal prop.
[RouterB] ipsec proposal prop
[RouterB-ipsec-proposal-prop] encapsulation-mode tunnel
[RouterB-ipsec-proposal-prop] transform esp
[RouterB-ipsec-proposal-prop] esp encryption-algorithm 3des
[RouterB-ipsec-proposal-prop] esp authentication-algorithm sha1
[RouterB-ipsec-proposal-prop] quit
# Create an IPSec policy and specify to set up SAs through IKE negotiation.
[RouterB] ipsec policy policy 10 isakmp
# Reference the IKE peer named peer in the IPSec policy.
[RouterB-ipsec-policy-isakmp-policy-10] ike-peer peer
# Reference ACL 3101 in the IPSec policy.
[RouterB-ipsec-policy-isakmp-policy-10] security acl 3101
# Reference the IPSec proposal prop in the IPSec policy.
[RouterB-ipsec-policy-isakmp-policy-10] proposal prop
[RouterB-ipsec-policy-isakmp-policy-10] quit
# Create a dialer rule.
[RouterB] dialer-rule 1 ip permit
# Create interface Dialer 0, and configure its MTU and settings allowing the username
and password assigned by the ISP to be used for dial and PPP authentication.
[RouterB] interface Dialer0
[RouterB-Dialer0] link-protocol ppp
[RouterB-Dialer0] ppp pap local-user test password simple 123456
[RouterB-Dialer0] ip address ppp-negotiate
[RouterB-Dialer0] dialer-group 1
[RouterB-Dialer0] dialer bundle 1
[RouterB-Dialer0] ipsec policy policy
[RouterB-Dialer0] mtu 1492
[RouterB-Dialer0] quit
# Configure a static route to interface Dialer 0.
[RouterB] ip route-static 172.16.0.0 255.255.0.0 Dialer 0
# Configure Ethernet interface 0/0/0.
[RouterB] interface Ethernet0/0/0
[RouterB-Ethernet0/0/0] tcp mss 1450
[RouterB-Ethernet0/0/0] ip address 192.168.0.1 255.255.255.0
[RouterB-Ethernet0/0/0] quit
# Configure the ATM interface on the ADSL card.
[RouterB] interface Atm1/0/0
3Com Corporation
8-20
Chapter 8 IKE Configuration