Samsung Ubigate iBG3026 Configuration Manual page 300

CHAPTER 25. IPSEC
7.
Display the IKE policies in detail.
Router# show crypto ike policy all detail
Policy name NW2, Local addr 172.16.0.1, Peer addr 172.16.0.2
Main mode, Response and Initiate, PFS is not enabled, Shared
Key is *****
Local ident 172.16.0.1(ip-address), Remote Ident
172.16.0.2(ip-address)
Proposal of priority 1
8.
Configure the IPSec tunnel to the remote host.
Router# configure terminal
Router/configure# crypto
Router/configure/crypto# ipsec policy NW2 172.16.0.2
Router/configure/crypto/ipsec policy NW2 172.16.0.2# match
address 172.16.0.1 32 10.0.2.0 24
Router/configure/crypto# ipsec policy NW2 172.16.0.2#
proposal 1
Router/configure/crypto# ipsec policy NW2 172.16.0.2/
proposal 1# encryption-algorithm aes128-cbc
Router/configure/crypto# ipsec policy NW2 172.16.0.2/
proposal 1# exit
Router/configure/crypto# ipsec policy NW2 172.16.0.2# exit
260
Encryption algorithm: 3des
Hash Algorithm: sha1
Authentication Mode: pre-shared-key
DH Group: group1
Lifetime in seconds: 86400
Lifetime in kilobytes: unlimited
For IPSec only-when you create an outbound tunnel, an inbound tunnel
is automatically created. The inbound tunnel applies the name that you
provide for the outbound tunnel and adds the prefix 'IN' to the name.
© SAMSUNG Electronics Co., Ltd.