How to Match IPsec VPN Policies Between the RG-NBR Router and the Reyee EG Router

Keywords:

IPsec VPN, IKE Policy, Transform Set
1. Issue Description

When configuring IPsec VPN on the Reyee NBR router and the Reyee EG router, the corresponding IKE policy and transform set do not match on the two devices.
2. Device Model and Firmware

Device Type	Device Model	Firmware Version
Reyee  NBR router	NBR6215-E	NBR_RGOS  11.9(6)B17P3, Release(11161700)
Reyee  EG router	EG105GW-X	ReyeeOS  2.300.0.1919

3. Solution

3.1 IKE Policy

Reyee EG router



Reyee NBR router



The matching relationship is shown in the following figure.

Reyee EG router	Authentication	Encryption	DH Group
Reyee NBR router	Hash  Algorithm	Encryption  Algorithm	DH Group

3.2 Transform Set
Reyee EG router



Reyee NBR router



The matching relationship is shown in the following figure.

Reyee EG router	esp-sha1-des
Reyee EG router	esp-des  esp-sha-hmac