
Configuring IPsec Services
C-2
304111-B Rev 00
Automated SA (IKE) Policy Examples
As you review the security policy examples in this section, refer to Figure C-1.
Figure C-1. IPsec Automated Outbound Policies for RTR1, RTR2, and RTR3
• The SA pair between RTR1 and RTR2 use both 3DES and HMAC MD5, and
a default SA expiry time of 8 hours.
• The SA pair between RTR1 and RTR3 use only DES and a default SA expiry
time of 8 hours.
• The SA pair between RTR1 and RTR4 use only SHA1 and an SA expiry time
of 24 hours.
RTR1
S32
INET
S31 - 119.68.12.1
RTR3
129.43.12.19 - S28
RTR2
189.132.10.1 - S52
RTR4
192.32.1.5 - S33
192.32.5.0
192.32.10.0
192.32.20.0
192.32.30.0
S51
S27
S31
Comentários a estes Manuais