Figure 16: Isp-X Uses Erx Routers To Connect Corporate Offices Over The - Juniper JUNOSE 11.0.X IP SERVICES Configuration Manual

Figure 16: ISP-X Uses ERX Routers to Connect Corporate Offices over the Internet
To configure the connections as shown in Figure 16 on page 161:
On each ERX router, create a protection suite that provides 3DES encryption
1.
with SHA-1 authentication on every packet.
erx1(config)#ipsec transform-set customerAprotection esp-3des-hmac-sha
erx2(config)#ipsec transform-set customerAprotection esp-3des-hmac-sha
erx3(config)#ipsec transform-set customerAprotection esp-3des-hmac-sha
On each ERX router, create preshared keys for the three routers to use to
2.
authenticate each other:
erx1(config)#ipsec key manual pre-share 100.2.0.1
erx1(config-manual-key)#key customerASecret
erx1(config-manual-key)#exit
erx1(config)#ipsec key manual pre-share 100.3.0.1
erx1(config-manual-key)#key customerASecret
erx1(config-manual-key)#exit
erx2(config)#ipsec key manual pre-share 100.1.0.1
erx2(config-manual-key)#key customerASecret
erx2(config-manual-key)#exit
erx2(config)#ipsec key manual pre-share 100.3.0.1
erx2(config-manual-key)#key customerASecret
erx2(config-manual-key)#exit
erx3(config)#ipsec key manual pre-share 100.1.0.1
erx3(config-manual-key)#exit
erx3(config-manual-key)#key customerASecret
erx3(config)#ipsec key manual pre-share 100.2.0.1
erx3(config-manual-key)#key customerASecret
erx3(config-manual-key)#exit
On erx1 create two IPSec tunnels, one to carry customer A's traffic between
3.
Ottawa and Boston and another to carry the traffic between Ottawa and Boca:
Tunnel 1:
Chapter 5: Configuring IPSec
Configuration Examples
161