IP SEC VPN

acl number 3001

acl number 3001
rule 5 permit ip source 10.1.1.0 0.0.0.255 destination 10.1.2.0  0.0.0.255

Criar a regra de ipsec

ipsec proposal tran1
esp authentication-algorithm sha1

Verificar 

[RTA]display ipsec proposal

Criando regra (policy)

ipsec policy P1 10 manual

security acl 3001

proposal tran1

tunnel local 1.1.1.20

tunnel remote 2.1.1.20

sa spi inbound esp 959447040

sa string-key inbound esp simple huawei

sa spi outbound esp 835977216

sa string-key outbound esp simple huawei

Aplicando a interface 

interface GigabitEthernet0/0/1

ip address 20.1.1.1 255.255.255.0

ipsec policy P1

verificar 

display ipsec policy