IPSec VPN Configuration On Huawei ⋆ IpCisco

In this lesson we will see IPSec VPN Configuration On Huawei Routers. IPSec configurations has some basic steps.

These steps are given below:

IPSec Authentication and Encryption Configuration
IPSec Policy Configuration
IPSec Interface Association
IPSec Configuration Verification

For our Huawei IPSec VPN Configuration, we will use the below basic topology.

Now, let’s start the configuration on each router.

You can download this configuration on Huawei eNSP Labs Page.

Table of Contents

IPSec Authentication and Encryption Configuration

Firstly, we will configure authentication and encription mode. To do this, we will enter the “ipsec proposal tran” command. Our authentication algorithm will be SHA-2 and we will use AES as encryption algorithm. Firstly we will configure Router 1.

[Huawei-Router1] ipsec proposal tran
[Huawei-Router1-ipsec-proposal-trans1] esp authentication-algorithm sha2
[Huawei-Router1-ipsec-proposal-trans1] esp encryption-algorithm aes
[Huawei-Router1-ipsec-proposal-trans1] quit

Then, we will configure IPSec with the same commands on Router 2 too.

[Huawei-Router2] ipsec proposal tran
[Huawei-Router2-ipsec-proposal-trans1] esp authentication-algorithm sha2
[Huawei-Router2-ipsec-proposal-trans1] esp encryption-algorithm aes
[Huawei-Router2-ipsec-proposal-trans1] quit