Siemens SIMATIC NET RUGGEDCOM RX5000 Konfigurationshandbuch Seite 703

Tunnel und VPNs
11.7.7 Beispiel: Konfigurieren eines GRE-Tunnels mit IPsec
!
ip gre-r1-r2
no bandwidth
ipv4
address 172.16.1.1/24
!
Gerät B
# show full-configuration
tunnel
gre r1-r2
local-ip
remote-ip 2.2.2.1
gre-keepalives enabled
gre-keepalives interval 10
gre-keepalives retries 3
!
ipsec
enabled
no nat-traversal
keep-alive 10
preshared-key 2.2.2.1 2.2.2.2
!
connection gre-r1-r2
!
658
nexthop type address
nexthop value 172.16.1.2
subnet 192.168.50.0/24
!
!
right
public-ip type address
public-ip value 2.2.2.2
nexthop type address
nexthop value 172.16.1.1
subnet 192.168.60.0/24
!
!
no peer
2.2.2.2
key $4$wocla9wLwmdwhYYI0d4IDw==
startup start
authenticate secret
connection-type tunnel
dead-peer-detect enabled
no l2tp
ike algorithm aes256 sha1 modp1536
!
esp modpgroup modp1536
esp algorithm aes256 sha1
!
left
public-ip type address
public-ip value 2.2.2.2
nexthop type address
nexthop value 172.16.1.1
subnet 192.168.60.0/24
!
!
right
public-ip type address
public-ip value 2.2.2.1
nexthop type address
nexthop value 172.16.1.2
subnet 192.168.50.0/24
!
!
RUGGEDCOM ROX II v2.15 Weboberfläche
Konfigurationshandbuch, 05/2022, C79000-G8900-1534-02