G2i4tK,h3c msr3610的路由器,手机vpn通过ikev2/ipsec连接!
问题描述:
h3c msr3610的路由器,由于手机系统软件升级,vpn连接方式只有以下三种方式ikev2/ipsec psk、ikev2/ipsec mschapv2、ikev2/ipsec rsa,想请教这个路由器是否支持基于ikev2的vpn服务端?如果支持,具体配置命令麻烦帮忙编辑一下!辛苦各位大神!!
组网及组网描述:
4小时前提问
H3C MSR3610路由器支持基于ikev2的VPN服务端。下面是一份具体的配置示例:
配置IKEv2策略:
undo ipsec policy-based-routing enable
ike proposal yhh-standard-ikev2 proposal
ike policy yhh-standard-ikev2 policy proposal yhh-standard-ikev2
ike gateway yhh-vpn-msr3610 user xrd-wol-1.0 pre-shared-key-simple Passw0rd-1.0 protocol ikev2 policy yhh-standard-ikev2
interface Tunnel0
tunnel source X.X.X.X # 配置路由器外网接口
tunnel destination A.A.A.A # 配置VPN客户端连接地址
配置IPSec策略:
ipsec proposal yhh-ipsec-proposal-2 encryption-algorithm aes-cbc-256 authentication-algorithm sha256 dh-group 14 pfs group14 lifetime 86400
ipsec policy yhh-standard-ipsec description yhh-standard-ipsec proposal yhh-ipsec-proposal-2
ipsec-policy policy policy-number yhh-standard-ipsec policy yhh-standard-ipsec
感谢
你正在,h3c msr3610的路由器,手机vpn通过ikev2/ipsec连接!