Configuring Ipsec For Site-To-Site Vpn; Creating An Ipsec Policy; Configuring Anti-Replay - Nortel Secure 4134 Configuration

Configuring IPsec for site-to-site VPN

Creating an IPsec policy

Create an IPsec policy for a dynamic IPsec SA.
Procedure steps
Step
1
2
3
Table 55
Variable definitions
Variable
<policy-name>
<peer-gateway-ip>
Configuring anti-replay
Enable or disable anti-replay service on the inbound security association.
The default is disabled.
Procedure steps
Step
1
2
3
Copyright © 2007, Nortel Networks
.
Action
To enter the configuration mode, enter:
configure terminal
To specify crypto configuration for IPsec and IKE, enter:
crypto
To create the IPsec policy, enter:
ipsec policy <policy-name> <peer-gateway-ip>
Value
IPsec policy name. Max 8 characters.
Peer security gateway IP address.
Action
To enter the configuration mode, enter:
configure terminal
To specify crypto configuration for IPsec and IKE, enter:
crypto
To specify the IPsec policy to configure, enter:
ipsec policy <policy-name> <peer-gateway-ip>
Nortel Secure Router 4134
Security — Configuration and Management
NN47263-600 01.02 Standard
10.0 3 August 2007
Configuring IPsec for site-to-site VPN 129
—End—