Profile Based IKEv1 GRE Tunnel Configuration in Huawei Router

 Huawei Device:

ipsec proposal IPSEC-PROPOSAL
 esp authentication-algorithm sha1
 esp encryption-algorithm aes-256
 
 ike peer IPSEC-PROPOSAL-Sec
 version 1
 pre-shared-key cipher  ?
 ike-proposal 1
 remote-address REMOTE-SIDE-IP-ADDRESS(y.y.y.y)
 rsa encryption-padding oaep
 rsa signature-padding pss
 undo local-id-preference certificate enable
 ikev2 authentication sign-hash sha2-256
 
 ipsec profile IPSec-Pro-IPSEC-PROPOSAL-Sec
 ike-peer IPSEC-PROPOSAL-Sec
 proposal IPSEC-PROPOSAL

interface Tunnel0/0/x
 description TUNNEL-NAME
 ip address aa.bb.cc.dd 255.255.255.252
 tunnel-protocol gre
 source SOURCE-SIDE-IP-ADDRESS(x.x.x.x)
 destination REMOTE-SIDE-IP-ADDRESS(y.y.y.y)
 ipsec profile IPSec-Pro-IPSEC-PROPOSAL

Comments

Popular posts from this blog

MPLS L2 VPN Types

Multiple Cisco device configuration Backup using python Script