Huawei quidway s7700 Configuration Manual page 149

Quidway S7700 Smart Routing Switch
Configuration Guide - SPU
2.
3.
4.
Step 2 Configure the IKE proposal on SPUs of SwitchA and SwitchB.
# Configure the IKE proposal on SPU of SwitchA.
[SPU] ike proposal 1
[SPU-ike-proposal-1] encryption-algorithm aes-cbc-128
[SPU-ike-proposal-1] authentication-algorithm md5
[SPU-ike-proposal-1] quit
# Configure the IKE proposal on SPU of SwitchB.
[SPU] ike proposal 1
[SPU-ike-proposal-1] encryption-algorithm aes-cbc-128
Issue 01 (2011-07-15)
[SwitchA-XGigabitEthernet5/0/0] port trunk allow-pass vlan 10 20
[SwitchA-XGigabitEthernet5/0/0] undo port trunk allow-pass vlan 1
[SwitchA-XGigabitEthernet5/0/0] quit
Configure the SPU on SwitchA.
<Quidway> system-view
[Quidway] sysname SPU
[SPU] interface XGigabitEthernet 0/0/1.1
[SPU-XGigabitEthernet0/0/1.1] control-vid 20 dot1q-termination
[SPU-XGigabitEthernet0/0/1.1] dot1q termination vid 20
[SPU-XGigabitEthernet0/0/1.1] ip address 202.38.163.1 255.255.255.0
[SPU-XGigabitEthernet0/0/1.1] arp broadcast enable
[SPU-XGigabitEthernet0/0/1.1] quit
[SPU] interface XGigabitEthernet 0/0/1.2
[SPU-XGigabitEthernet0/0/1.2] control-vid 10 dot1q-termination
[SPU-XGigabitEthernet0/0/1.2] dot1q termination vid 10
[SPU-XGigabitEthernet0/0/1.2] ip address 202.38.168.2 255.255.255.0
[SPU-XGigabitEthernet0/0/1.2] arp broadcast enable
[SPU-XGigabitEthernet0/0/1.2] quit
Configure SwitchB.
<Quidway> system-view
[Quidway] sysname SwitchB
[SwitchB] vlan 30
[SwitchB-vlan30] quit
[SwitchB] interface gigabitethernet 1/0/11
[SwitchB-GigabitEthernet1/0/11] port link-type access
[SwitchB-GigabitEthernet1/0/11] port default vlan 30
[SwitchB-GigabitEthernet1/0/11] quit
[SwitchB] vlan 20
[SwitchB-vlan20] quit
[SwitchB] interface gigabitethernet 1/0/12
[SwitchB-GigabitEthernet1/0/12] port link-type trunk
[SwitchB-GigabitEthernet1/0/12] port trunk allow-pass vlan 20
[SwitchB-GigabitEthernet1/0/12] undo port trunk allow-pass vlan 1
[SwitchB-GigabitEthernet1/0/12] quit
[SwitchB] interface XGigabitEthernet5/0/0
[SwitchB-XGigabitEthernet5/0/0] port link-type trunk
[SwitchB-XGigabitEthernet5/0/0] port trunk allow-pass vlan 30 20
[SwitchB-XGigabitEthernet5/0/0] undo port trunk allow-pass vlan 1
[SwitchB-XGigabitEthernet5/0/0] quit
Configure the SPU on SwitchB.
<Quidway> system-view
[Quidway] sysname SPU
[SPU] interface XGigabitEthernet 0/0/1.1
[SPU-XGigabitEthernet0/0/1.1] control-vid 20 dot1q-termination
[SPU-XGigabitEthernet0/0/1.1] dot1q termination vid 20
[SPU-XGigabitEthernet0/0/1.1] ip address 202.38.162.1 255.255.255.0
[SPU-XGigabitEthernet0/0/1.1] arp broadcast enable
[SPU-XGigabitEthernet0/0/1.1] quit
[SPU] interface XGigabitEthernet 0/0/1.2
[SPU-XGigabitEthernet0/0/1.1] control-vid 30 dot1q-termination
[SPU-XGigabitEthernet0/0/1.1] dot1q termination vid 30
[SPU-XGigabitEthernet0/0/1.1] ip address 202.38.165.2 255.255.255.0
[SPU-XGigabitEthernet0/0/1.1] arp broadcast enable
[SPU-XGigabitEthernet0/0/1.1] quit
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
4 IPSec Configuration
138