Figure 17: Connecting Customers Who Use Similar Address Schemes - Juniper JUNOSE 11.2.X IP SERVICES Configuration Manual

JunosE 11.2.x IP Services Configuration Guide
156

Figure 17: Connecting Customers Who Use Similar Address Schemes

To configure the connections as shown in Figure 17 on page 156:
On each ERX router, create a protection suite that provides customer A with 3DES
1.
encryption and SHA-1 authentication, and customer B with AH authentication using
MD5.
erx1(config)#ipsec transform-set customerAprotection esp-3des-hmac-sha
erx1(config)#ipsec transform-set customerBprotection ah-hmac-md5
erx2(config)#ipsec transform-set customerAprotection esp-3des-hmac-sha
erx2(config)#ipsec transform-set customerBprotection ah-hmac-md5
erx3(config)#ipsec transform-set customerAprotection esp-3des-hmac-sha
erx3(config)#ipsec transform-set customerBprotection ah-hmac-md5
On each ERX router, create a protection suite for the three routers to use to
2.
authenticate each other:
erx1(config)#ipsec key manual pre-share 5.2.0.1
erx1(config-manual-key)#key customerASecret
erx1(config-manual-key)#exit
erx1(config)#ipsec key manual pre-share 5.3.0.1
erx1(config-manual-key)#key customerASecret
erx1(config-manual-key)#exit
erx1(config)#ipsec key manual pre-share 5.2.0.2
erx1(config-manual-key)#key customerBSecret
erx1(config-manual-key)#exit
erx1(config)#ipsec key manual pre-share 5.3.0.2
erx1(config-manual-key)#key customerBSecret
erx1(config-manual-key)#exit
erx2(config)#ipsec key manual pre-share 5.1.0.1
erx2(config-manual-key)#key customerASecret
erx2(config-manual-key)#exit
erx2(config)#ipsec key manual pre-share 5.3.0.1
Copyright © 2010, Juniper Networks, Inc.