Security Features

Figure 1 Tunnel Mode Between Two Foundry Security Gateways - Single Proposals

Step 1: Configure a WAN bundle of network type untrusted:

Router1/configure/interface/bundle wan1# link t1 1

Router1/configure/interface/bundle wan1# encapsulation ppp

Router1/configure/interface/bundle wan1# ip address 172.16.0.1 24

Router1/configure/interface/bundle wan1# crypto untrusted

Router1/configure/interface/bundle wan1# exit

Step 2: Configure the Ethernet interface with trusted network type:

Router1/configure# interface ethernet 0

Configuring existing Ethernet interface

Router1/configure interface/ethernet 0# ip address 10.0.1.1 24

Router1/configure/interface/ethernet 0# crypto trusted

Router1/configure/interface/ethernet 0# exit

Step 3: Display the crypto interfaces:

Router1# show crypto interfaces

Interface

Network

Name

Type

---------

-------

ethernet0

trusted

wan1

untrusted

Step 4: Add route to peer LAN:

Router1/configure# ip route 10.0.2.0 24 wan1

June 2004

© 2004 Foundry Networks, Inc.

15 - 11

Page 236
Image 236
Foundry Networks AR3202-CL, AR3201-CL, AR1204 Configure a WAN bundle of network type untrusted, Add route to peer LAN