![](/images/new-backgrounds/1190993/190993143x1.webp)
OnSite 2800 Series User Manual | 6 • VPN configuration |
|
|
Example: Create an IPsec policy profile
The following example defines a profile for
2800(cfg)#profile
Creating/modifying an outgoing ACL profile for IPsec
An access control list (ACL) profile in the outgoing direction selects which outgoing traffic to encrypt and/or authenticate, and which IPsec policy profile to use. IPsec does not require an incoming ACL.
Note Outgoing and incoming IPsec traffic passes an ACL (if available) twice, once before and once after encryption/authentication. So the respective ACLs must permit the encrypted/authenticated and the plain traffic.
For detailed information on how to
Procedure: To create/modify an outgoing ACL profile for IPsec
Mode: Configure
Step | Command | Purpose |
|
|
|
1 | node(cfg)#profile acl name | Creates or enters the ACL profile name |
2 | The expression | |
| [ | permit ACL rule activates the IPsec policy profile |
| name to encrypt/authenticate the traffic identified | |
|
| |
|
| by this rule. |
|
|
|
Note New entries are appended at the end of an ACL. Since the position in the list is relevant, you might need to delete the ACL and rewrite it completely.
Example: Create/modify an ACL profile for IPsec
The following example configures an outgoing ACL profile that interconnects the two private networks 192.168.1/24 and 172.16/16.
2800(cfg)#profile acl VPN_Out
VPN configuration task list | 72 |