09-06-2008 06:33 AM
Hi...
Actually I'm new in netscreen. Is there anybody here wanna help me to convert the below cisco ios to netscreen config? Because I have SSG5, and I wanna try to use it, by replacing my existing cisco 2600.
Your help really appreciate it. many thanks
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
lifetime 43200
crypto isakmp key cisco address 0.0.0.0 0.0.0.0
!
!
crypto ipsec transform-set BM-TRANSFORM esp-3des esp-sha-hmac
mode transport
crypto ipsec df-bit clear
!
crypto ipsec profile VPN-PROF
set transform-set BM-TRANSFORM
!
interface Tunnel1
bandwidth 64
ip address 10.0.2.3 255.255.255.0
no ip redirects
ip mtu 1400
ip nhrp authentication cisco
ip nhrp map multicast 10.204.20.111
ip nhrp map 10.0.2.1 10.204.20.111
ip nhrp network-id 100001
ip nhrp holdtime 600
ip nhrp nhs 10.0.2.1
ip tcp adjust-mss 1360
delay 1000
tunnel source Loopback2
tunnel mode gre multipoint
tunnel key 100001
tunnel protection ipsec profile VPN-PROF