Huawei AR1200 series Configuration Manual page 350

Huawei AR1200 Series Enterprise Routers
Configuration Guide - VPN
----End
Configuration Files
l
l
Issue 01 (2012-04-20)
Dns server IP
Wins server IP
Configuration file of RouterA
#
ipsec efficient-vpn 2 mode client
remote-address 60.1.2.1 v2
pre-shared-key huawei
#
interface Ethernet1/0/0
ip address 60.1.1.1 255.255.255.0
ipsec efficient-vpn 2
#
ip route-static 10.1.2.0 255.255.255.0 60.1.1.2
#
return
Configuration file of RouterB
#
ipsec proposal tran1
#
ike proposal 5
dh
group2
#
ike peer rut3
v2
pre-shared-key
huawei
ike-proposal
5
service-scheme
schemetest
#
ipsec policy-template use1
10
ike-peer
rut3
proposal
tran1
sa duration time-based
600000
#
ipsec policy policy1 10 isakmp template
use1
#
ip pool
pooltest
network 100.1.1.0 mask
255.255.255.128
#
aaa
service-scheme
schemetest
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
: 2.2.2.2, 2.2.2.3
: 3.3.3.2, 3.3.3.3
5 IPSec Configuration
339