HP VPN Firewall Appliances VPN Configuration Guide

ManualsBrandsHP ManualsComputer AccessoriesHP ProCurve Switch xl Access Controller Module

191

192

193

194

195

196

197

198

199

200

184

# Configure the keys.

[FirewallA-ipsec-policy-manual-map1-10] sa string-key outbound esp abcdefg

[FirewallA-ipsec-policy-manual-map1-10] sa string-key inbound esp gfedcba

[FirewallA-ipsec-policy-manual-map1-10] quit

# Configure the IP address for GigabitEthernet 0/2.

[FirewallA] interface gigabitethernet 0/2

[FirewallA-GigabitEthernet0/2] ip address 2.2.2.1 255.255.255.0

# Apply the IPsec policy group to the interface.

[FirewallA-GigabitEthernet0/2] ipsec policy map1

2. Configure Firewall B:

# Define an ACL to identify data flows from subnet 10.1.2.0/24 to subnet 10.1.1.0/24.

<FirewallB> system-view

[FirewallB] acl number 3101

[FirewallB-acl-adv-3101] rule permit ip source 10.1.2.0 0.0.0.255 destination

10.1.1.0 0.0.0.255

[FirewallB-acl-adv-3101] quit

# Configure a static route to Host A.

[FirewallB] ip route-static 10.1.1.0 255.255.255.0 2.2.3.2

# Create an IPsec transform set named tran1.

[FirewallB] ipsec transform-set tran1

# Specify the encapsulation mode as tunnel.

[FirewallB-ipsec-transform-set-tran1] encapsulation-mode tunnel

# Specify the security protocol as ESP.

[FirewallB-ipsec-transform-set-tran1] transform esp

# Specify the algorithms for the IPsec transform set.

[FirewallB-ipsec-transform-set-tran1] esp encryption-algorithm des

[FirewallB-ipsec-transform-set-tran1] esp authentication-algorithm sha1

[FirewallB-ipsec-transform-set-tran1] quit

# Create a manual IPsec policy.

[FirewallB] ipsec policy use1 10 manual

# Apply the ACL.

[FirewallB-ipsec-policy-manual-use1-10] security acl 3101

# Apply the IPsec transform set.

[FirewallB-ipsec-policy-manual-use1-10] transform-set tran1

# Configure the remote IP address of the tunnel.

[FirewallB-ipsec-policy-manual-use1-10] tunnel remote 2.2.2.1

# Configure the local IP address of the tunnel.

[FirewallB-ipsec-policy-manual-use1-10] tunnel local 2.2.3.1

# Configure the SPIs.

[FirewallB-ipsec-policy-manual-use1-10] sa spi outbound esp 54321

[FirewallB-ipsec-policy-manual-use1-10] sa spi inbound esp 12345

# Configure the keys.

[FirewallB-ipsec-policy-manual-use1-10] sa string-key outbound esp gfedcba

[FirewallB-ipsec-policy-manual-use1-10] sa string-key inbound esp abcdefg

[FirewallB-ipsec-policy-manual-use1-10] quit