Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- dmbaturin@reki# show vpn ipsec
- esp-group HETNET {
- compression disable
- proposal 1 {
- encryption aes256
- }
- }
- ike-group HETNET {
- dead-peer-detection {
- action restart
- }
- lifetime 3600
- proposal 1 {
- encryption aes256
- }
- }
- ipsec-interfaces {
- interface pppoe0
- }
- logging {
- log-modes all
- }
- site-to-site {
- peer 85.159.xxx.x {
- authentication {
- mode pre-shared-secret
- pre-shared-secret xxxxxxxxxxxxxxxxx
- }
- description vpn.het.net
- ike-group HETNET
- local-ip 90.188.xxx.xxx
- tunnel 1 {
- allow-nat-networks disable
- esp-group HETNET
- local-subnet 172.16.255.1/32
- remote-subnet 172.16.255.2/32
- }
- }
- peer xxxxxxx.xxxxxx.net {
- authentication {
- pre-shared-secret xxxxxxxxxxxxxxxxx
- }
- ike-group HETNET
- local-ip 90.188.xxx.xxx
- tunnel 1 {
- esp-group HETNET
- local-subnet 172.16.255.3/32
- remote-subnet 172.16.255.4/32
- }
- }
- }
- dmbaturin@reki# show interfaces loopback
- lo {
- address 172.16.255.1/32
- address 2001:470:xxxx:ffff::2/128
- address 172.16.255.3/32
- }
- dmbaturin@reki# show interfaces tunnel
- tun10 {
- address 10.31.97.2/30
- address 2001:470:xxxx:aabb::2/64
- encapsulation gre
- local-ip 172.16.255.1
- mtu 1468
- multicast enable
- remote-ip 172.16.255.2
- }
- tun11 {
- address 10.31.97.5/30
- address 2001:470:xxxx:aabc::1/64
- encapsulation gre
- local-ip 172.16.255.3
- mtu 1468
- multicast enable
- remote-ip 172.16.255.4
- }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement