3Com 3C13636 Configuration Manual page 1151

3Com Router 3000 Ethernet Family
Configuration Guide
# Configure the IKE peer test2.
[PE1] ike peer test2
[PE1-ike-peer-test2]
[PE1-ike-peer-test2] remote-address 31.31.31.2
[PE1-ike-peer-test2] quit
# Configure IPSec proposals. (The details are omitted here.)
[PE1] ipsec proposal prop1
[PE1] ipsec proposal prop2
# Configure IPSec policies.
[PE1] ipsec policy map1 1 isakmp
[PE1-ipsec-policy-isakmp-map-1] security acl 3000
[PE1-ipsec-policy-isakmp-map-1]
[PE1-ipsec-policy-isakmp-map-1]
[PE1-ipsec-policy-isakmp-map-1] quit
[PE1] ipsec policy map2 1 isakmp
[PE1-ipsec-policy-isakmp-map-2] security acl 3001
[PE1-ipsec-policy-isakmp-map-2] ike-peer test2
[PE1-ipsec-policy-isakmp-map-2] proposal prop2
# Bind the VPN instances to the Ethernet interfaces and apply IPSec policies to the
interfaces.
[PE1] interface Ethernet0/0/0
[PE1-Ethernet0/0/0] ip binding vpn-instance vrf1
[PE1-Ethernet0/0/0] ip address 21.21.21.1 255.255.255.0
[PE1-Ethernet0/0/0] ipsec policy map1
[PE1-Ethernet0/0/0] quit
[PE1] interface Ethernet0/0/1
[PE1-Ethernet0/0/1] ip binding vpn-instance vrf2
[PE1-Ethernet0/0/1] ip address 31.31.31.1 255.255.255.0
[PE1-Ethernet0/0/1] ipsec policy map2
[PE1-Ethernet0/0/1] quit
# Enable MPLS on the interface Ethernet0/0/2.
[PE1] interface Ethernet0/0/2
[PE1- Ethernet0/0/2] ip address 41.41.41.1 255.255.255.0
[PE1- Ethernet0/0/2] mpls
[PE1- Ethernet0/0/2] mpls ldp enable
[PE1- Ethernet0/0/2] quit
# Configure the interface LoopBack0.
[PE1] interface LoopBack0
[PE1-LoopBack0] ip address 100.100.100.1 255.255.255.255
pre-shared-key huawei
ike-peer test1
proposal prop
3Com Corporation
7-47
Chapter 7 IPSec Configuration