Huawei AR1200 series Configuration Manual page 340

Huawei AR1200 Series Enterprise Routers
Configuration Guide - VPN
IPsec policy name: "map1"
sequence number: 10
mode: isakmp
-----------------------------
Step 9 Verify the configurations.
After the configurations are complete, PC A can ping PC B successfully. The data transmitted
between PC A and PC B is encrypted.
Run the display ike sa command on RouterA, and the following information is displayed:
[Huawei] display ike sa
---------------------------------------------------------
Flag Description:
RD--READY
HRT--HEARTBEAT
----End
Configuration Files
l
Issue 01 (2012-04-20)
Connection id: 3
encapsulation mode: tunnel
tunnel local : 202.138.163.1
[inbound ESP SAs]
spi: 1406123142 (0x53cfbc86)
proposal: ESP-ENCRYPT-DES ESP-AUTH-SHA1
sa remaining key duration (bytes/sec): 1887436528/3575
max received sequence-number: 4
udp encapsulation used for nat traversal: N
[outbound ESP SAs]
spi: 3835455224 (0xe49c66f8)
proposal: ESP-ENCRYPT-DES ESP-AUTH-SHA1
sa remaining key duration (bytes/sec): 1887436464/3575
max sent sequence-number: 5
udp encapsulation used for nat traversal: N
Conn-ID Peer
14 202.138.162.1
16 202.138.162.1
ST--STAYALIVE
LKG--LAST KNOWN GOOD SEQ NO.
Configuration file of RouterA
#
acl number
3101
rule 5 permit ip source 10.1.1.0 0.0.0.255 destination 10.1.2.0
0.0.0.255
#
ipsec proposal
tran1
esp authentication-algorithm sha1
#
ike proposal
1
encryption-algorithm aes-
cbc-128
authentication-algorithm md5
#
ike local-name huawei01
#
ike peer spub
v1
exchange-mode
aggressive
pre-shared-key
huawei
ike-proposal
1
local-id-type
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
tunnel remote: 202.138.162.1
VPN Flag(s)
0 RD|ST
0 RD|ST
RL--REPLACED FD--FADING
BCK--BACKED UP
5 IPSec Configuration
Phase
1
2
TO--TIMEOUT
329