0
edits
Changes
Template:Networking RUTX configuration example cisco ipsec (view source)
Revision as of 10:44, 2 April 2020
, 10:44, 2 April 2020→Cisco configuration
# Write '''Pre shared key''' (a shared password used for authentication between the peers. The value of this field must match on both instances).
# Write '''Pre shared key''' (a shared password used for authentication between the peers. The value of this field must match on both instances).
# Set '''Local identifier''' (device identifier for IPsec tunnel, write RUTX LAN IP address).
# Set '''Local identifier''' (device identifier for IPsec tunnel, write RUTX LAN IP address).
# Set '''Remote identifier''' (remote address of the remote peer, write Cisco LAN IP address).
# Set '''Remote identifier''' (remote device identifier for IPsec tunnel, write Cisco LAN IP address).
# Write '''Local subnet''' (an IP address/Subnet mask of the router on which the IPsec instance is configured).
# Write '''Local subnet''' (an IP address/Subnet mask of the router on which the IPsec instance is configured).
# Write '''Remote subnet''' (LAN IP address/Subnet mask of the Cisco router).
# Write '''Remote subnet''' (LAN IP address/Subnet mask of the Cisco router).
Next step in configuring IPsec instance is '''Phase''' settings. For this example we left the default RUTX '''Phase 1''' and '''Phase 2''' settings.
Next step in configuring IPsec instance is '''Phase''' settings. For this example we changed '''Encryption algorithm''' to '''3DES''' and added '''8h''' '''Lifetime'''. Match this configuration in both '''Phase 1''' and '''Phase 2''' settings.
[[File:Networking_RUTXxx_configuration_example_ipsec_rutx_phase1_v1.png|border|class=tlt-border|1100x1100px]]
[[File:Networking_RUTXxx_configuration_example_ipsec_rutx_phase1_v1.png|border|class=tlt-border|1100x1100px]]
# Select '''Group: Group''' (5).
# Select '''Group: Group''' (5).
When you are do with '''IPsec Profiles''', save settings, go to '''Site-to-Site''' settings and apply the following configuration:
When you are done with '''IPsec Profiles''', save settings, go to '''Site-to-Site''' settings and apply the following configuration:
[[File:Networking_rutxxx_configuration_example_ipsec_cisco_s2s_v2.png|border|class=tlt-border]]
[[File:Networking_rutxxx_configuration_example_ipsec_cisco_s2s_v2.png|border|class=tlt-border]]
