Step 2: Configure the Ethernet interface with trusted network type:

Router1/configure# interface ethernet 0 Configuring existing Ethernet interface

Router1/configure interface/ethernet 0# ip address 10.0.1.1 24 Router1/configure/interface/ethernet 0# crypto trusted Router1/configure/interface/ethernet 0# exit

Step 3: Display the crypto interfaces:

Router1# show crypto interfaces

Interface

Network

Name

Type

---------

-------

ethernet0

trusted

wan1

untrusted

Step 4: Add the route to the peer LAN:

Router1/configure# ip route 10.0.2.0 24 wan1

Step 5: Configure IKE to the peer gateway:

Router1/configure# crypto

Router1/configure/crypto# ike policy Router2 172.16.0.2 Router1/configure/crypto/ike/policy Router2 172.16.0.2# local- address 172.16.0.1

message: Default proposal created with priority1-des-sha1- pre_shared-g1

message: Key String has to be configured by

the user

Router1/configure/crypto/ike/policy Router2

172.16.0.2# key

secretkey

 

Router1/configure/crypto/ike/policy Router2

172.16.0.2# proposal 1

Router1/configure/crypto/ike/policy Router2

172.16.0.2/proposal 1#

encryption-al

 

algorithm 3des-cbc

 

Router1/configure/crypto/ike/policy Router2

172.16.0.2/proposal 1#

exit

 

Router1/configure/crypto/ike/policy Router2

172.16.0.2# exit

Page 229
Image 229
Foundry Networks AR3201, AR3202 Configure the Ethernet interface with trusted network type, Display the crypto interfaces