AR系列路由器使用加密卡配置IPSec的方法
在AR系列路由器上使用加密卡来加密IPSec与普通IPSec的却别在于建立IPSec提议(Proposal)时关联相应的加密卡即可,配置方法如下:
[Router]ipsec card-proposal 2
[Router-ipsec-proposal-2]use encrypt-card 3/0/0
以下是在一台AR路由器上使用加密卡加密IPSec的完整配置脚本:
Router配置脚本
#
sysname Router
#
radius scheme system
#
domain system
#
ike proposal 1
#
ike peer a
pre-shared-key huawei-3com
remote-address 202.0.0.2
#
ipsec card-proposal 2
use encrypt-card 3/0/0
#
ipsec policy a 1 isakmp
security acl 3000
ike-peer a
proposal a
#
acl number 3000
rule 0 permit ip source 192.168.1.0 0.0.0.255 destination 192.168.2.0 0.0.0.255
#
interface Ethernet1/0/0
ip address 192.168.1.1 255.255.255.0
#
interface Serial2/0/0
link-protocol ppp
ip address 202.0.0.1 255.255.255.0
ipsec policy a
#
interface Encrypt3/0/0
#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 202.0.0.2 preference 60
#
user-interface con 0
user-interface vty 0 4
#
return
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作