BT3900B IPSEC PSEGW

Hello,

Currently we have BTS3900B using IPSEC as backhaul to a Huawei Eudemon unit. Do we know if it is possible to replace the Eudemon with a Cisco ASR1001 or Juniper? If so do you have any sample configuration as could not find anything on Hedex which explains about the requirements of the security gateway along with the required settings.

We are using the following configuration on the Eudemon

acl number 3000

 description pico

 rule 5 permit ip destination 172.7.1.0 0.0.0.255

 rule 10 permit ip destination 172.100.0.0 0.0.0.255

ipsec policy-template pico_t 10           

 security acl 3000

 ike-peer bts2

 alias pico_t_10

 proposal 3des-md5

ike peer bts2

 pre-shared-key 

 ike-proposal 10

 undo version 1

 local-id-type fqdn

 remote-id picogsm_segw10                 

 remote-address ip-pool 10

ipsec policy pico 1 isakmp template pico_t

interface Tunnel5

 description pico

 alias Tunnel5

 ip address unnumbered interface LoopBack10

 tunnel-protocol ipsec

 ipsec policy pico

firewall zone name pico

 set priority 14

 add interface Tunnel5

ip pool 10 172.7.1.1 172.7.1.254

Regards

Thanks