Sr4134 2; Configuring The Firewall For Nat And Ipsec Tunnels - Nortel Secure 4134 Configuration

248 Configuration examples
4

SR4134 2

Step
1
2
3
4
Configuring the firewall for NAT and IPsec tunnels
This example shows how to properly configure the SR4134 firewall to
implement NAT as well as allow IPsec traffic within a Branch Office Tunnel
created between two SR4134s.
Copyright © 2007, Nortel Networks
.
Tunnel destination is not required; packets are dynamically tunneled.
To add routes, enter:
ip route 192.168.28.0/24 wan1
ipv6 route 2002::/16 t1
Action
To configure the IPv4-enabled interface, enter:
interface bundle wan2
link t1 2/0
encapsulation ppp
ip address 192.168.28.10 255.255.255.0
crypto untrusted
exit
To configure the IPv6-enabled interface, enter:
interface ethernet 0/2
ipv6 address 2002:c0a8:1c64:1::2/64
exit
To configure the tunnel interface, enter:
interface tunnel t1
ipv6 address 2002:c0a8:1c64::1/64
tunnel source 192.168.28.10
tunnel mode ipv6 6to4
exit
Tunnel destination is not required; packets are dynamically tunneled.
To add routes, enter:
ip route 192.168.27.0/24 wan1
ipv6 route 2002::/16 t1
Nortel Secure Router 4134
Security — Configuration and Management
NN47263-600 01.02 Standard
10.0 3 August 2007
—End—
—End—