Creating a Security Policy
569
higher priority. When a security policy group is applied on an interface, actually
multiple different security policies in this security policy group are applied on it
at the same time, so that different data streams are protected by different SAs.
Creating a Security
Policy Manually
Perform the following configurations in system view.
Table 639
Establish Security Policy Manually
By default, no security policy is created.
Configure access control list quoted in security policy
After a security policy is created, it is also necessary to specify the quoted
encryption access control list item for it to judge which inbound/outbound
communications should be encrypted and which should not.
Perform the following configurations in IPSec policy view.
Table 640
Configure Encryption Access Control List Quoted in Security Policy
By default, no encryption access control list is quoted in the security policy.
Set start point and end point of security tunnel
The channel with security policy applied is usually called a
security tunnel
. A
security tunnel is established between local and peer gateways, so the local
address and the remote address must be set correctly to successfully establish a
security tunnel.
For the security policy created manually, only one remote address can be specified.
To set a new remote address, the previously specified one must be deleted first.
Only when both local address and remote address are set correctly can a security
tunnel be created.
Perform the following configurations in IPSec policy view.
Table 641
Specify Start Point and End Point of Security Tunnel
Operation
Command
Create security policy manually to enter
IPSec policy view(applicable to IPSec
software and crypto card)
ipsec policy
policy-name
sequence-number
manual
Modify the created security policy
manually (applicable to IPSec software and
crypto card)
ipsec policy
policy-name
sequence-number
Delete the created security policy
(applicable to IPSec software and crypto
card)
undo ipsec policy
policy-name
sequence-number
Operation
Command
Configure encryption access control list
quoted in security policy (applicable to
IPSec software and crypto card)
security acl
access-list-number
Cancel encryption access control list
quoted in security policy (applicable to
IPSec software and crypto card)
undo security acl
Operation
Command
Set local address of security tunnel
(applicable to IPSec software and crypto
card)
tunnel local
ip-address
Summary of Contents for Router 3032
Page 1: ...http www 3com com 3Com Router Configuration Guide Published March 2004 Part No 10014299...
Page 4: ...VPN 615 RELIABILITY 665 QOS 681 DIAL UP 721...
Page 6: ...2 ABOUT THIS GUIDE...
Page 7: ...I GETTING STARTED Chapter 1 3Com Router Introduction Chapter 2 3Com Router User Interface...
Page 8: ...4...
Page 16: ...12 CHAPTER 1 3COM ROUTER INTRODUCTION...
Page 34: ...30...
Page 60: ...56 CHAPTER 3 SYSTEM MANAGEMENT...
Page 98: ...94 CHAPTER 6 DISPLAY AND DEBUGGING TOOLS...
Page 110: ...106...
Page 114: ...110 CHAPTER 8 INTERFACE CONFIGURATION OVERVIEW...
Page 158: ...154 CHAPTER 10 CONFIGURING WAN INTERFACE...
Page 168: ...164...
Page 188: ...184 CHAPTER 13 CONFIGURING PPPOE CLIENT...
Page 192: ...188 CHAPTER 14 CONFIGURING SLIP Router ip route static 0 0 0 0 0 0 0 0 10 110 0 1...
Page 248: ...244 CHAPTER 16 CONFIGURING LAPB AND X 25...
Page 320: ...316...
Page 330: ...326 CHAPTER 20 CONFIGURING IP ADDRESS...
Page 362: ...358 CHAPTER 21 CONFIGURING IP APPLICATION...
Page 374: ...370 CHAPTER 23 CONFIGURING IP COUNT...
Page 406: ...402 CHAPTER 25 CONFIGURING DLSW...
Page 408: ...404...
Page 452: ...448 CHAPTER 29 CONFIGURING OSPF...
Page 482: ...478 CHAPTER 30 CONFIGURING BGP...
Page 494: ...490 CHAPTER 31 CONFIGURING IP ROUTING POLICY...
Page 502: ...498...
Page 508: ...504 CHAPTER 33 IP MULTICAST...
Page 514: ...510 CHAPTER 34 CONFIGURING IGMP...
Page 526: ...522 CHAPTER 36 CONFIGURING PIM SM...
Page 528: ...524...
Page 532: ...528 CHAPTER 37 CONFIGURING TERMINAL ACCESS SECURITY...
Page 550: ...546 CHAPTER 38 CONFIGURING AAA AND RADIUS PROTOCOL...
Page 590: ...586 CHAPTER 40 CONFIGURING IPSEC...
Page 599: ...IX VPN Chapter 42 Configuring VPN Chapter 43 Configuring L2TP Chapter 44 Configuring GRE...
Page 600: ...596...
Page 638: ...634 CHAPTER 43 CONFIGURING L2TP...
Page 649: ...X RELIABILITY Chapter 45 Configuring a Standby Center Chapter 46 Configuring VRRP...
Page 650: ...646...
Page 666: ...662...
Page 670: ...666 CHAPTER 47 QOS OVERVIEW...
Page 700: ...696 CHAPTER 49 CONGESTION MANAGEMENT...
Page 706: ...702 CHAPTER 50 CONGESTION AVOIDANCE...
Page 707: ...XII DIAL UP Chapter 51 Configuring DCC Chapter 52 Configuring Modem...
Page 708: ...704...
Page 762: ...758 CHAPTER 52 CONFIGURING MODEM...