3Com 3C13636 Configuration Manual page 533

3Com Router 3000 Ethernet Family
Configuration Guide
[3Com-Serial1/0/0] ip address 202.38.160.1 255.255.255.0
[3Com-Serial1/0/0] nat outbound 2001
# Configure the internal FTP and WWW servers.
[3Com-Serial1/0/0] nat server 2002 protocol tcp global 202.38.160.1 inside
10.110.10.3 ftp
[3Com-Serial1/0/0] nat server 2002 protocol tcp global 202.38.160.1 inside
10.110.10.2 www
[3Com-Serial1/0/0] quit
# Configure IPSec.
[3Com] ipsec proposal tran1
[3Com-ipsec-proposal-tran1] encapsulation-mode tunnel
[3Com-ipsec-proposal-tran1] transform esp
[3Com-ipsec-proposal-tran1] esp encryption-algorithm des
[3Com-ipsec-proposal-tran1] esp authentication-algorithm sha1
[3Com-ipsec-proposal-tran1] quit
[3Com] ipsec policy map1 10 manual
[3Com-ipsec-policy-manual-map1-10] security acl 2003
[3Com-ipsec-policy-manual-map1-10] proposal tran1
[3Com-ipsec-policy-manual-map1-10] tunnel remote 202.38.162.1
[3Com-ipsec-policy-manual-map1-10] tunnel local 202.38.160.1
[3Com-ipsec-policy-manual-map1-10] sa spi outbound esp 12345
[3Com-ipsec-policy-manual-map1-10] sa spi inbound esp 54321
[3Com-ipsec-policy-manual-map1-10] sa string-key outbound esp
[3Com-ipsec-policy-manual-map1-10] sa string-key inbound esp gfedcba
[3Com-ipsec-policy-manual-map1-10] quit
# Apply the IPSec policy group to interface serial 1/0/0.
[3Com] interface serial 1/0/0
[3Com-Serial1/0/0] ipsec policy map1
[3Com-Serial1/0/0] quit
# Configure a static route to Router 2.
[3Com] ip route-static 10.110.30.0 255.255.255.0 202.38.162.1
2) Configure Router 2
# Assign an IP address to interface Ethernet 0/0/0.
[3Com] interface ethernet 0/0/0
[3Com-ethernet 0/0/0] ip address 10.110.30.1 255.255.255.0
[3Com-ethernet 0/0/0] quit
# Configure an ACL, implementing IPSec.
[3Com] acl number 2003
3Com Corporation
11-22
Chapter 11 NAT Configuration