Ipsec Configuration Examples; Configuring A Manual Mode Ipsec Tunnel For Ipv4 Packets - HP MSR2000 Configuration Manual

Task
Clear IPsec statistics.

IPsec configuration examples

Configuring a manual mode IPsec tunnel for IPv4 packets

Network requirements
As shown in
between subnet 10.1.1.0/24 and subnet 10.1.2.0/24. Configure the tunnel as follows:
• Specify the encapsulation mode as tunnel, the security protocol as ESP, the encryption algorithm as
128-bit AES, and the authentication algorithm as HMAC-SHA1.
Manually set up IPsec SAs.
•
Figure 44 Network diagram
Configuration procedure
1. Configure Router A:
# Configure IP addresses for interfaces. (Details not shown.)
# Define an ACL to identify data flows from subnet 10.1.1.0/24 to subnet 10.1.2.0/24.
<RouterA> system-view
[RouterA] acl number 3101
[RouterA-acl-adv-3101] rule permit ip source 10.1.1.0 0.0.0.255 destination 10.1.2.0
0.0.0.255
[RouterA-acl-adv-3101] quit
# Configure a static route to Host B. The command uses the direct next hop address (2.2.2.3) as
an example.
[RouterA] ip route-static 10.1.2.0 255.255.255.0 ethernet 1/2 2.2.2.3
# Create an IPsec transform set named tran1.
[RouterA] ipsec transform-set tran1
# Specify the encapsulation mode as tunnel.
[RouterA-ipsec-transform-set-tran1] encapsulation-mode tunnel
# Specify the security protocol as ESP.
[RouterA-ipsec-transform-set-tran1] protocol esp
Figure 44, establish an IPsec tunnel between Router A and Router B to protect data flows
Command
reset ipsec statistics [ tunnel-id tunnel-id ]
161