Configure Acl - 3Com 3C13636 Configuration Manual

3Com Router 3000 Ethernet Family
Configuration Guide
[RouterA-ipsec-proposal-prop] quit
# Create security policy and specify SA establishment via IKE negotiation.
[RouterA] ipsec policy policy 10 isakmp
# Create an IPSec policy and reference the IKE peer in the policy.
[RouterA-ipsec-policy-isakmp-policy-10] ike-peer peer
# Reference the ACL 3101 in the IPSec policy.
[RouterA-ipsec-policy-isakmp-policy-10] security acl 3101
# Reference the IPSec proposal "prop" in the IPSec policy.
[RouterA-ipsec-policy-isakmp-policy-10] proposal prop
[RouterA-ipsec-policy-isakmp-policy-10] quit
# Access the serial interface S0/0/0 and configure its IP address.
[RouterA] interface Serial0/0/0
[RouterA -Serial0/0/0] ip address 10.0.0.1 255.255.0.0
# Apply the IPSec policy group "policy" on the serial interface S0/0/0.
[RouterA-Serial0/0/0] ipsec policy policy
[RouterA-Serial0/0/0] remote address pool 1
2) Configure Router B:
# Set a name for the local security GW.
[RouterB] ike local-name routerb

# Configure ACL.

[RouterB] acl number 3101 match-order auto
[RouterB-acl-adv-3101] rule permit ip source any destination any
[RouterB-acl-adv-3101] quit
# Configure an IKE peer.
[RouterB] ike peer peer
[RouterB-ike-peer-peer] exchange-mode aggressive
[RouterB-ike-peer-peer] pre-shared-key abc
[RouterB-ike-peer-peer] id-type name
[RouterB-ike-peer-peer] remote-ip 10.0.0.1
[RouterB-ike-peer-peer] remote-name routera
[RouterB-ike-peer-peer] nat traversal
[RouterB -ike-peer-peer] quit
# Create an IPSec proposal "prop".
[RouterB] ipsec proposal prop
[RouterB-ipsec-proposal-prop] encapsulation-mode tunnel
[RouterB-ipsec-proposal-prop] transform esp
[RouterB-ipsec-proposal-prop] esp encryption-algorithm des
[RouterB-ipsec-proposal-prop] esp authentication-algorithm sha1
3Com Corporation
8-16
Chapter 8 IKE Configuration