Ipsec Client Option For Example 6.4 - Allied Telesis AR Router Configuration

Helpful Scripts
Router B
set user securedelay=600
add user=secoff pass=<your password> priv=sec
# PPP
#
create ppp=0 over=syn0
# optional set ppp=0 over=syn0 lqr=off echo=on
#
# IP
#
enable ip
Add ip int=eth0 ip=192.168.20.1
Add ip int=ppp0 ip=222.222.222.1
add ip rou=0.0.0.0 next=0.0.0.0 int=ppp0
#
# Firewall
# To enable out going ping see example 5.1.1
enable fire
create fire poli=main
add fire poli=main int=eth0 type=private
add fire poli=main int=ppp0 type=public
add fire poli=main nat=enhanced int=eth0 gblint=ppp0
add fire poli=main rule=1 int=ppp0 action=allow ip=222.222.222.1 prot=50 gblip=222.222.222.1
add fire poli=main rule=2 int=ppp0 action=nonat ip=192.168.20.1-192.168.20.254 prot=all encap=ipsec
# Rule 3 for internally initiated VPN traffic to Main Office
add firewall poli=main ru=3 ac=nonat int=eth0 prot=all ip=192.168.20.1-192.168.20.254
set firewall poli=main ru=3 remoteip=192.168.10.1-192.168.10.254
# IPSec
# Includes VPN client configuration for user "Bob". The same key is used for the remote office
# and the remote VPN client PC (laptop).
# Note: Use Section 1.5 to enable system security and generate an Encryption Key of type DES on
# router A and B
ena ipsec
create ips sas=1 prot=esp hasha=null encalg=des keym=manual enckey=1 inspi=1555 outspi=1555
create ips bundle=1 keym=manual string="1"
create ips pol=remoffice int=ppp0 act=ipsec key=manual bund=1 peer=200.200.200.1
set ips pol=remoffice rad=192.168.10.0 lmask=255.255.255.0 lad=192.168.20.0 rmask=255.255.255.0
create ips pol=internet int=ppp0 act=permit

6.4.1. IPSec Client option for Example 6.4

IPSec Client Configuration for User "Roaming1" (Must have fixed IP address)
create enco key=1 type=des val=<router A key>
#
# IPSec
# Includes VPN client configuration for user "Bob"
create ips sas=1 prot=esp hasha=null encalg=des keym=manual enckey=1 ipspi=1555 outspi=1555
create ips bundle=1 keym=manual string="1"
create ips pol=roaming1 int=dialup act=ipsec key=manual bund=1 peer=200.200.200.1
set ips pol=roaming1 rad=192.168.10.0 rma=255.255.255.0 lad=<dialup ip address>
rmask=255.255.255.255
create ips pol=internet int=dialup act=permit
Helpful Scripts
Revision 5.8.7; 5 April 2001
Page
34