Huawei quidway s7700 Configuration Manual page 154

Quidway S7700 Smart Routing Switch
Configuration Guide - SPU
l
l
Issue 01 (2011-07-15)
#
interface GigabitEthernet1/0/12
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 20
#
interface XGigabitEthernet5/0/0
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 10 20
#
return
Configuration of the SPU on SwitchB
#
sysname SPU
#
system-view
#
ike local-name huawei02
#
ike proposal 1
encryption-algorithm aes-cbc-192
authentication-algorithm md5
#
ike peer spua v1
exchange-mode aggressive
ike-proposal 1
pre-shared-key huawei
local-id-type name
remote-name huawei01
remote-address 202.38.163.1
local-address 202.38.162.1
#
ipsec proposal tran1
esp authentication-algorithm sha1
#
ipsec policy use1 10 isakmp
security acl 3101
ike-peer spua
proposal tran1
#
acl number 3101
rule permit ip source 10.1.2.0 0.0.0.255 destination 10.1.1.0 0.0.0.255
#
ip route-static 10.1.1.0 255.255.255.0 202.38.163.1
ip route-static 202.38.163.1 255.255.255.0 202.38.162.1
#
interface XGigabitEthernet0/0/1.1
control-vid 20 dot1q-termination
dot1q termination vid 20
ip address 202.38.162.1 255.255.255.0
ipsec policy use1
arp broadcast enable
#
interface XGigabitEthernet0/0/1.2
control-vid 30 dot1q-termination
dot1q termination vid 30
ip address 202.38.162.2 255.255.255.0
arp broadcast enable
#
return
Configuration file of SwitchB
#
sysname SwitchB
#
vlan batch 20 30
#
interface GigabitEthernet1/0/11
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
4 IPSec Configuration
143