华三IPSEC配置模板

   点到多点

总部：
ipsec transform-set zongbu
esp encryption-algorithm des-cbc
esp authentication-algorithm md5
#
ipsec policy-template zongbu 1
transform-set zongbu
security acl 3000
ike-profile zongbu
#
ipsec policy zongbu 1 isakmp template zongbu
#
ike profile zongbu
keychain zongbu
exchange-mode aggressive
local-identity fqdn zongbu
match remote identity fqdn fenbu
#

#
ike keychain zongbu
pre-shared-key hostname fenbu key simple 123456
interface GigabitEthernet0/1
ipsec apply policy zongbu

分部：
ipsec transform-set fenbu
esp encryption-algorithm des-cbc
esp authentication-algorithm md5
#
ipsec policy fenbu 1 isakmp
transform-set fenbu
security acl 3000
remote-address 61.128.1.1
ike-profile fenbu
#
ike identity fqdn fen