![](/images/new-backgrounds/1190993/190993149x1.webp)
OnSite 2800 Series User Manual | 6 • VPN configuration |
|
|
IN MANUAL | ToBurg | Tunnel | no |
|
|
200.200.200.1 | - | 1111 | - | - | |
3622/unlimited |
| 19047/unlimited |
|
| |
OUT MANUAL | ToBurg | Tunnel | no |
|
|
200.200.200.1 | - | 2222 | - | - | |
2857/unlimited |
| 19047/unlimited |
|
|
Sample configurations
The following sample configurations establish IPsec connections between an OnSite and a Cisco router. To interconnect two OnSite routers instead, derive the configuration for the second OnSite by doing the follow- ing modifications:
•Swap ‘inbound’ and ‘outbound’ settings
•Adjust the ‘peer’ setting
•Swap the private networks in the ACL profiles
•Adjust the IP addresses of the LAN and WAN interfaces
•Adjust the route for the remote network
IPsec tunnel, DES encryption
OnSite configuration
profile
profile
use profile
spi outbound esp 2222 peer 200.200.200.1 mode tunnel
profile acl VPN_Out
permit ip 192.168.1.0 0.0.0.255 172.16.0.0 0.0.255.255
profile acl VPN_In permit esp any any permit ah any any
permit ip 172.16.0.0 0.0.255.255 192.168.1.0 0.0.0.255 deny ip any any
context ip router
interface LAN
ipaddress 192.168.1.1 255.255.255.0 interface WAN
Sample configurations | 75 |