Samsung Ubigate iBG2016 Configuration Manual page 336

CHAPTER 5. IPSEC
Display the IKE policies in detail.
Networks2# show crypto ike policy all detail
Policy name Networks2, Local addr 172.16.0.1, Peer addr
172.16.0.2
Main mode, Response and Initiate, PFS is not enabled, Shared
Key is *****
Local ident 172.16.0.1 (ip-address), Remote Ident 172.16.0.2
(ip-address)
Proposal of priority 1
Configure IPSec tunnel to the remote host.
Networks2Router/configure/crypto# ipsec policy Networks2
172.16.0.1
Networks2Router/configure/crypto/ipsec/policy Networks2
172.16.0.1# match address 10.0.2.0 24 10.0.1.0 24
message: Default proposal created with priority1-esp-3des-
sha1-tunnel and activated.
Networks2Router/configure/crypto/ipsec/policy Networks2
172.16.0.1# proposal 2
Networks1Router/configure/crypto/ipsec/policy Networks2
172.16.0.1# proposal 2
message: Proposal added with priority2-esp-3des-sha1-tunnel.
Networks2Router/configure/crypto/ipsec/policy Networks2
172.16.0.1/proposal 2# encryption-algorithm aes256-cbc
Networks2Router/configure/crypto/ipsec/policy Networks2
172.16.0.1/proposal 2# mode tunnel
Networks2Router/configure/crypto/ipsec/policy Networks2
172.16.0.1# exit
Networks2Router/configure/crypto# exit
Networks2Router/configure#
286
Encryption algorithm: 3des
Hash Algorithm: sha1
Authentication Mode: pre-shared-key
DH Group: group1
Lifetime in seconds: 86400
Lifetime in kilobytes: unlimited
© SAMSUNG Electronics Co., Ltd.