acl number 3000
rule 3000 permit ip source 172.16.1.0 0.0.0.255 destination 192.168.1.0 0.0.0.25
5
#
ipsec proposal ok
esp authentication-algorithm sha2-512
esp encryption-algorithm aes-256
#
ike proposal 10
encryption-algorithm aes-cbc-256
dh group5
authentication-algorithm md5
prf hmac-md5
#
ike peer site2 v1
exchange-mode aggressive
pre-shared-key simple cisco
ike-proposal 10
remote-address 202.100.100.100
#
ipsec policy ok-policy 10 isakmp
security acl 3000
ike-peer site2
proposal ok
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ip address 10.10.10.20 255.255.255.0
ipsec policy ok-policy
IPSEC VPN configuration on AR
Created: Dec 21, 2018 07:25:33Latest reply: Dec 27, 2018 07:30:39
932
6
9
0
0
- x
- convention：
|
|
|
|
I come to the forum to see technical posts every day, sooner or later I will become an expert.
|
|
|
|
|
|
|
|
|
|
|
|
|
Comment
Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
- Politically sensitive content
- Content concerning pornography, gambling, and drug abuse
- Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
