Configuring An Ipsec Tunnel Interface - Huawei AR1200 series Configuration Manual

Huawei AR1200 Series Enterprise Routers
Configuration Guide - VPN
ipsec profile profile-name
An IPSec profile is created and the IPSec profile view is displayed.
IPSec profiles can only be applied to IPSec tunnel interfaces.
Step 3 Run:
proposal proposal-name
An IPSec proposal referenced by an IPSec profile is configured.
An IPSec profile can reference a maximum of 12 IPSec proposals. By default, an IPSec profile
does not reference any IPSec proposals.
Step 4 Run:
ike-peer peer-name
An IKE peer referenced by an IPSec profile is configured.
By default, an IPSec profile does not reference any IKE peers.
Step 5 (Optional) Run:
pfs { dh-group1 | dh-group2 | dh-group5 | dh-group14 }
The Diffie-Hellman group referenced by an IPSec profile during negotiation is configured.
By default, an IPSec profile does not reference any Diffie-Hellman group during negotiation.
Step 6 (Optional) Run:
sa duration {
The SA lifetime is set.
Step 7 Run:
quit
Return to the system view.
Step 8 (Optional) Run:
ipsec sa global-duration { time-based seconds | traffic-based kilobytes }
The global SA lifetime is set.
By default, the global SA lifetime represented by time is 3600 seconds; the global SA lifetime
represented by traffic volume is 1843200 kilobytes.
----End

5.5.3 Configuring an IPSec Tunnel Interface

This section describes how to apply an IPSec profile to an IPSec tunnel interface.
Issue 01 (2012-04-20)
NOTE
For details on how to configure an IKE proposal, see
NOTE
For details on how to configure an IKE peer, see
traffic-based kilobytes | time-based seconds }
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
5.4.5 Configuring an IPSec
5.4.4 Configuring an IKE
5 IPSec Configuration
Proposal.
Peer.
304