3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide

184 CHAPTER 11: IKE CONFIGURATION

# Configure an IKE peer.

[3ComB] ike peer peer

[3ComB-ike-peer-peer] exchange-mode aggressive

[3ComB-ike-peer-peer] pre-shared-key abc

[3ComB-ike-peer-peer] id-type name

[3ComB-ike-peer-peer] remote-name 3ComA

[3ComB-ike-peer-peer] remote-address 10.0.0.1

[3ComB-ike-peer-peer] nat traversal

# Create an IPsec proposal "prop".

[3ComB] ipsec proposal prop

[3ComB-ipsec-proposal-prop] encapsulation-mode tunnel

[3ComB-ipsec-proposal-prop] transform esp

[3ComB-ipsec-proposal-prop] esp encryption-algorithm des

[3ComB-ipsec-proposal-prop] esp authentication-algorithm sha1

# Create an IPsec policy and specify to set up SA by means of IKE negotiation.

[3ComB] ipsec policy policy 10 isakmp

# Quote the IKE peer in the IPsec policy.

[3ComB-ipsec-policy-isakmp-policy-10] ike-peer peer

# Quote the ACL 3101 in the IPsec policy.

[3ComB-ipsec-policy-isakmp-policy-10] security acl 3101

# Quote the IPsec proposal "prop" in the IPsec policy.

[3ComB-ipsec-policy-isakmp-policy-10] proposal prop

# Access the interface E0/0/0 and assign a dynamic IP address to the interface.

[3ComB-Ethernet0/0/0] pppoe-client dial-bundle-number 1

# Configure dial-up port

[3ComB] dialer-rule 1 ip permit

[3ComB] interface dialer 1

[3ComB-Dialer1] link-protocol ppp

[3ComB-Dialer1] ppp pap local-user aaa password simple aaa

[3ComB-Dialer1] mtu 1450

[3ComB-Dialer1] ip address ppp-negotiate

[3ComB-Dialer1] dialer user 12

[3ComB-Dialer1] dialer-group 1

[3ComB-Dialer1] dialer bundle 1

# Apply the IPsec policy group "policy" on the interface Dialer 1.

[3ComB-Dialer1] ipsec policy policy