Настройка Allied Telesyn

Возникла необходимость настроить посредством роутера (Allied Telesyn) vpn между двумя территориально распределенными офисами. Буду очень благодарен, если подскажете, как это сделать - через web-интерфейс не получается.

Вам необходимо отредактировать файл конфигурации. Публикую рабочий конфиг роутера Allied Telesyn (настраивал некоторое время назад):


# Command Handler configuration

# System configuration
set help=400-291a.hlp
set system name="AR-007"
set system location="Smolensk"

# TIMEZONE configuration

# Flash memory configuration

# LOADER configuration

# User configuration
add user=PcrcNetAdmin pass=************* priv=securityOfficer lo=yes
set user=PcrcNetAdmin telnet=no netmask=255.255.255.255
delete user=manager

# TTY configuration

# ASYN configuration

# ATM configuration


# ETH configuration

# BRI driver configuration

# PRI driver configuration

# SWITCH (pre-VLAN) configuration

# LAPD configuration

# Q.931 configuration

# PPP templates configuration

# ISDN Call Control configuration

# TDM configuration

# SYN drivers configuration

# ASYN Call Control configuration

# Frame relay configuration

# LAPB configuration

# X.25 DTE configuration

# MIOX configuration

# L2TP configuration

# Sec Associations configuration

# VLAN general configuration

# VLAN port configuration

# CLASSIFR configuration

# SWITCH (post-VLAN) configuration

# PPP configuration

# DHCP (Pre IP) configuration

# GRE configuration

# IP configuration
enable ip
add ip int=vlan1 ip=10.8.1.1 mask=255.255.0.0 ospf=1
add ip int=eth0 ip=82.140.67.237 mask=255.255.255.248 ospf=1
add ip rou=0.0.0.0 mask=0.0.0.0 int=eth0 next=82.140.67.233
add ip local=1 ip=10.8.1.2

# IPv6 configuration

# SWITCH (post-IP) configuration

# PIM configuration

# PIM6 configuration

# DVMRP configuration

# X.25C configuration

# OSPF configuration

# CLNS configuration

# SNMP configuration

enable snmp
create snmp community=public
enable snmp community=public trap
add snmp community=public manager=10.1.1.100
add snmp community=public traphost=10.1.1.100

# INT configuration

enable int=vlan1 linktrap

# Firewall configuration

create firewall policy="Smolensk_FW"
ena firewall poli="Smolensk_FW" icmp_f=all
add firewall poli="Smolensk_FW" int=vlan1 type=private
add firewall poli="Smolensk_FW" int=eth0 type=public
add firewall poli="Smolensk_FW" nat=enhanced int=vlan1 gblin=eth0
add firewall poli="Smolensk_FW" ru=1 ac=allo int=eth0 prot=udp po=500 ip=194.150.127.227 gblip=194.150.127.227 gblp=500
add firewall poli="Smolensk_FW" ru=2 ac=allo int=eth0 prot=udp po=4500 ip=194.150.127.227 gblip=194.150.127.227 gblp=4500
add firewall poli="Smolensk_FW" ru=3 ac=non int=eth0 prot=ALL enc=ips
add firewall poli="Smolensk_FW" ru=4 ac=non int=vlan1 prot=ALL ip=10.8.0.1-10.8.254.254
set firewall poli="Smolensk_FW" ru=4 rem=10.1.0.1-10.1.254.254
add firewall poli="Smolensk_FW" ru=5 ac=allow int=eth0 prot=tcp po=22 ip=194.150.127.227 gblip=194.150.127.227 gblp=22
enable firewall

# RADIUS configuration

# Telnet configuration

disable telnet server

# Perm assignments configuration

# STT configuration

# BOOTP configuration

# NTP configuration

# disable ntp
set ntp utc=+03:00:00
add ntp peer=10.1.2.62

# Ping configuration

# DHCP (Post IP) configuration

enable dhcp
create dhcp poli="Smolensk_DHCP" lease=432000
add dhcp poli="Smolensk_DHCP" subn=255.255.0.0
add dhcp poli="Smolensk_DHCP" rou=10.8.1.1
add dhcp poli="Smolensk_DHCP" dnss=10.1.2.62,10.3.2.54
add dhcp poli="Smolensk_DHCP" do="pcrc.spb"
create dhcp ran="Smolensk_DHCP" poli="Smolensk_DHCP" ip=10.8.2.1 num=32

# DHCP6 configuration

# IPX configuration

# DECnet configuration

# Appletalk configuration

# Bridge configuration

# ENCO configuration

# SSH configuration

enable ssh server serverkey=2 hostkey=1 expirytime=0 logintimeout=60
add ssh user=PcrcNetAdmin password=******************

# SSL configuration

# Log configuration

cre log out=2 dest=syslog server=10.1.1.100 secure=no mess=20 syslogformat=extended local=1
add log out=2 filt=1 severity=>3

# RSVP configuration

# Mail configuration

# TPAD configuration

# IPSEC configuration

create ipsec sas=1 key=isakmp prot=esp enc=des hasha=null
create ipsec sas=2 key=isakmp prot=ah hasha=sha
create ipsec bund=1 key=isakmp string="1 and 2"

create ipsec pol="Smolensk_vpn_isakmp" int=eth0 ac=permit
set ipsec pol="Smolensk_vpn_isakmp" lp=500 rp=500

create ipsec pol="Smolensk_vpn_ipsec" int=eth0 ac=ipsec key=isakmp bund=1 peer=82.140.67.235
set ipsec pol="Smolensk_vpn_ipsec" lad=10.8.0.0 lma=255.255.0.0 rad=10.1.0.0 rma=255.255.0.0

create ipsec pol="Smolensk_ssh" int=eth0 ac=permit lp=22

enable ipsec

# ISAKMP configuration

create isakmp pol="Smolensk_isakmp_policy" pe=82.140.67.235 key=1
set isakmp pol="Smolensk_isakmp_policy" sendd=true setc=true
enable isakmp

# PKI configuration

# HTTP configuration

# VRRP configuration

# GUI configuration

# BGP configuration

# LB configuration

# TACP configuration

# SKEY configuration

# UPNP configuration

# PORTAUTH configuration

# 802.1X configuration

# MAC Based Auth configuration

# Software QoS configuration

# WANLB configuration

# TRIGGER Configuration