3Com 3C13636 Configuration Manual page 994

3Com Router 3000 Ethernet Family
Configuration Guide
7.1.1 IPSec....................................................................................................................... 7-1
7.1.2 IPSec Basic Concepts............................................................................................. 7-2
7.1.3 Overview of Encryption Card .................................................................................. 7-4
7.1.4 Introduction to IPSec DPD ...................................................................................... 7-5
7.1.5 Introduction to IPSec Mutli-Instance ....................................................................... 7-6
7.1.6 IPSec on V 2.41 ...................................................................................................... 7-7> 7.2 IPSec Configuration........................................................................................................... 7-8 7.2.1 Defining ACL ........................................................................................................... 7-9 7.2.2 Defining an IPSec Proposal .................................................................................. 7-10 7.2.3 Creating IPSec Policies......................................................................................... 7-14 7.2.4 Configuring IPSec Policy Template....................................................................... 7-21 7.2.5 Applying IPSec Policy Group to Interface ............................................................. 7-22 7.2.6 Disabling Next-Payload Field Checking................................................................ 7-23 7.2.7 Configuring the Encryption Card (Optional) .......................................................... 7-24 7.2.8 Configuring IPSec DPD......................................................................................... 7-26 7.3 Displaying and Debugging IPSec .................................................................................... 7-27 7.3.1 Displaying and Debugging over IPSec Module on V 2.41 Platform...................... 7-27 7.3.2 Displaying and Debugging Encryption Card Information ...................................... 7-28 7.4 Typical IPSec Configuration Examples ........................................................................... 7-30 7.4.1 Establishing Security Association Manually.......................................................... 7-30 7.4.2 Establishing Security Association in isakmp Mode ............................................... 7-34 7.4.3 Implementing Encryption/Decryption and Authentication on Encryption Card ..... 7-36 7.4.4 Setting Up SAs Between a Router and a VRRP Standby Group ......................... 7-40 7.4.5 IPSec/IKE Multi-Instance Configuration Example................................................. 7-45 Chapter 8 IKE Configuration ........................................................................................................ 8-1 8.1 IKE Overview ..................................................................................................................... 8-1 8.1.1 Brief Introduction to IKE .......................................................................................... 8-1 8.1.2 Preparation for IKE Configuration ........................................................................... 8-3 8.2 IKE Configuration............................................................................................................... 8-4 8.2.1 Setting a Name for the Local Security GW ............................................................. 8-4 8.2.2 Defining IKE Proposal ............................................................................................. 8-5 8.2.3 Configuring IKE Peer .............................................................................................. 8-7 8.2.4 Configuring Keepalive Timer................................................................................. 8-11 8.3 Displaying and Debugging IKE ........................................................................................ 8-12 8.4 Typical Configuration of IKE ............................................................................................ 8-13 8.4.1 Typical IKE Configuration Example....................................................................... 8-13 8.4.2 IKE Aggressive Mode and NAT Traversal Configuration Example....................... 8-14 8.4.3 ADSL+IPSec/IKE Configuration Example............................................................. 8-17 8.5 IKE Fault Diagnosis and Troubleshooting ....................................................................... 8-21 Chapter 9 PKI Configuration ........................................................................................................ 9-1 9.1 PKI Overview ..................................................................................................................... 9-1 9.1.1 Introduction.............................................................................................................. 9-1 3Com Corporation iv Table of Contents
arrowInitFunction(); document.addEventListener('scroll', arrowInitFunction); var divPdf = document.querySelectorAll('div.pdf, div[class^=\'pdf-\']'); if(divPdf.length > 0) { var hasTocList = false; for(var i = 0; i < divPdf.length; ++i) { if(divPdf[i].classList.contains('toc-list')) { hasTocList = true; } } if(! hasTocList) { scalePdf() } } function scalePdf() { var maxWidth = 970, width = window.innerWidth, scale for(var i = 0; i < divPdf.length; ++i) { var element = divPdf[i] if (width >= maxWidth) { setPdfSize(element, '\'\'') element.parentElement.style.width = '' element.parentElement.style.height = '' return } scale = Math.min(width / maxWidth) setPdfSize(element, 'scale(' + scale + ')') var marginTop = +element.style['margin-top'].replace(/[^-\d.]/g, ''), new_height = element.getBoundingClientRect().height + marginTop element.parentElement.style.width = (maxWidth * scale) + 'px'; element.parentElement.style.height = new_height + 'px'; } } function setPdfSize(element, value) { element.style.cssText = 'transform:' + value + ';' + '-ms-transform:' + value + ';' + '-webkit-transform:' + value + ';' + '-o-transform:' + value + ';' + 'opacity:1' }