Enterasys Networks XSR-Series Router User Manual


 
Configuration Guide Page 37 of 55
9.4r1 GRE encapsulated in IPSEC site-to-site tunnel via pre-shared key
Router-1
XSR-1805_1#show running-config
!!
! Version 6.0.0.0, Built Sep 14 2003, 11:09:28
!
hostname XSR-1805_1
!
crypto isakmp proposal prop-map1
authentication pre-share
group 5
lifetime 10800
!
access-list 101 permit gre any any
!
crypto isakmp peer 20.20.20.2 255.255.255.255
proposal prop-map1
config-mode gateway
!
crypto ipsec transform-set VPN-3des esp-3des esp-sha-hmac
set pfs group2
set security-association lifetime kilobytes 1000000
set security-association lifetime seconds 3601
!
crypto map gre-map1 75
set transform-set VPN-3des
match address 101
set peer 20.20.20.2
mode transport
!
interface FastEthernet1
description "LAN-Interface1"
ip address 10.10.10.1 255.255.255.0
no shutdown
!
interface FastEthernet2
description "LAN-Interface2"
crypto map gre-map1
ip address 20.20.20.1 255.255.255.0
no shutdown
!
interface Vpn1 point-to-point
ip multicast-redirect 192.168.1.2
tunnel "VPN+GRE"
set protocol gre
set active
set peer 20.20.20.2
set heartbeat 3 3
ip address 192.168.1.1 255.255.255.0
ip firewall disable
ip ospf cost 100
ip ospf dead-interval 4
ip ospf hello-interval 1
!
router ospf 1
network 10.10.10.0 0.0.0.255 area 0.0.0.0
network 192.168.1.0 0.0.0.255 area 0.0.0.0
!
end
XSR-1805_1(config)#aaa user 20.20.20.2
XSR-1805_1(config-aaa)#password XSR