Samsung Ubigate iBG3026 Configuration Manual page 319

address(ip/mask/port):(10.0.2.0/255.255.255.0/any)
Destination ip
address(ip/mask/port):(10.0.1.0/255.255.255.0/any)
Proposal of priority 1
Protocol: esp
Mode: tunnel
Encryption Algorithm: des
Hash Algorithm: sha1
Lifetime in seconds: 3600
Lifetime in Kilobytes: 4608000
Proposal of priority 2
Protocol: esp
Mode: tunnel
Encryption Algorithm: aes256(key length=256 bits)
Hash Algorithm: sha1
Lifetime in seconds: 3600
Lifetime in Kilobytes: 4608000
10.
Configure firewall policies to allow IKE negotiation through untrusted
interface.
Router/configure# firewall internet
Router/configure/firewall internet# policy 1000 in service
ike self
Router/configure/firewall internet/policy 1000 in# exit
Router/configure/firewall internet# exit
11.
Display firewall policies in the internet map.
Router# show firewall policy internet
Advanced: S-Self Traffic, F-Ftp-Filter, H-Http-Filter,
Pri Dir Source Addr
Proto Action Advanced
1000 in any any
1024 out any any
© SAMSUNG Electronics Co., Ltd.
R-Rpc-Filter, N-Nat-Ip/Nat-Pool, L-Logging,
E-Policy Enabled, M-Smtp-Filter
Ubigate iBG3026 Configuration Guide/Ed.00
Destination Addr Sport Dport
ike PERMIT SE
any any any PERMIT SE
279