9.4r1 GRE encapsulated in IPSEC site-to-site tunnel via pre-shared key

Router-1

XSR-1805_1#show running-config

!!

!Version 6.0.0.0, Built Sep 14 2003, 11:09:28

hostname XSR-1805_1

crypto isakmp proposal prop-map1 authentication pre-share

group 5 lifetime 10800

access-list 101 permit gre any any

crypto isakmp peer 20.20.20.2 255.255.255.255 proposal prop-map1

config-mode gateway

crypto ipsec transform-set VPN-3des esp-3des esp-sha-hmac set pfs group2

set security-association lifetime kilobytes 1000000 set security-association lifetime seconds 3601

crypto map gre-map1 75

set transform-set VPN-3des match address 101

set peer 20.20.20.2 mode transport

!

interface FastEthernet1 description "LAN-Interface1"

ip address 10.10.10.1 255.255.255.0 no shutdown

!

interface FastEthernet2 description "LAN-Interface2" crypto map gre-map1

ip address 20.20.20.1 255.255.255.0 no shutdown

!

interface Vpn1 point-to-point

ip multicast-redirect 192.168.1.2 tunnel "VPN+GRE"

set protocol gre set active

set peer 20.20.20.2 set heartbeat 3 3

ip address 192.168.1.1 255.255.255.0 ip firewall disable

ip ospf cost 100

ip ospf dead-interval 4 ip ospf hello-interval 1

!

router ospf 1

network 10.10.10.0 0.0.0.255 area 0.0.0.0 network 192.168.1.0 0.0.0.255 area 0.0.0.0

!

end

XSR-1805_1(config)#aaa user 20.20.20.2

XSR-1805_1(config-aaa)#password XSR

Configuration Guide

Page 37 of 55

Page 37
Image 37
Enterasys Networks XSR-Series manual XSR-18051config#aaa user XSR-18051config-aaa#password XSR