Huawei quidway s7700 Configuration Manual page 153

Quidway S7700 Smart Routing Switch
Configuration Guide - SPU
Flag Description:
RD--READY
HRT--HEARTBEAT
----End
Configuration Files
l
l
Issue 01 (2011-07-15)
16 202.38.162.1
ST--STAYALIVE
LKG--LAST KNOWN GOOD SEQ NO.
Configuration of the SPU on SwitchA
#
sysname SPU
#
system-view
#
ike local-name huawei01
#
ike proposal 1
encryption-algorithm aes-cbc-192
authentication-algorithm md5
#
#
ike peer spub v1
exchange-mode aggressive
ike-proposal 1
pre-shared-key huawei
local-id-type name
remote-name huawei02
remote-address 202.38.162.1
local-address 202.38.163.1
#
ipsec proposal tran1
esp authentication-algorithm sha1
#
ipsec policy map1 10 isakmp
security acl 3101
ike-peer spub
proposal tran1
#
acl number 3101
rule permit ip source 10.1.1.0 0.0.0.255 destination 10.1.2.0 0.0.0.255
#
ip route-static 10.1.2.0 255.255.255.0 202.38.162.1
ip route-static 202.38.162.1 255.255.255.0 202.38.163.1
#
interface XGigabitEthernet0/0/1.1
control-vid 20 dot1q-termination
dot1q termination vid 20
ip address 202.38.163.1 255.255.255.0
ipsec policy map1
arp broadcast enable
#
interface XGigabitEthernet0/0/1.2
control-vid 10 dot1q-termination
dot1q termination vid 10
ip address 202.38.163.2 255.255.255.0
arp broadcast enable
#
return
Configuration file of SwitchA
#
sysname SwitchA
#
vlan batch 10 20
#
interface GigabitEthernet1/0/11
port link-type access
port default vlan 10
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
0 RD|ST
RL--REPLACED FD--FADING
BCK--BACKED UP
4 IPSec Configuration
2
TO--TIMEOUT
142