Ipsec security-policy ip-mask
Hi team , I need to add a policy to allow the media to and from the ip 30.30.30.2?
Topology
10.10.10.1 sbc 20.20.20.1 ----- ipsec ----- 30.30.31.1 Ipsec tunnel
10.10.10.1 sbc 20.20.20.1 ----- SIP ----- 30.30.30.1/28 GW SIP
10.10.10.1 sbc 20.20.20.1 ----- Media ----- 30.30.30.2 GW Media
Set security-policy :
security-policy
name IKE
network-interface S0P4:560
priority 5
local-ip-addr-match 20.20.20.1
remote-ip-addr-match 30.30.30.1
local-port-match 0
local-port-match-max 65535
remote-port-match 0
remote-port-match-max 65535
trans-protocol-match ALL
direction both
local-ip-mask 255.255.255.255
remote-ip-mask 255.255.255.248
action ipsec
ike-sainfo-name SA-IPSec
outbound-sa-fine-grained-mask
local-ip-mask 255.255.255.255
remote-ip-mask 255.255.255.255
local-port-mask 0
remote-port-mask 0
trans-protocol-mask 0
valid enabled
sa-lookup-exception enabled
vlan-mask 0xFFF
security-policy
name Ipsec
network-interface S0P4:560
priority 5
local-ip-addr-match 20.20.20.1
remote-ip-addr-match 30.30.30.1
local-port-match 500
local-port-match-max 65535
remote-port-match 500
remote-port-match-max 65535
trans-protocol-match ALL
direction both
local-ip-mask 255.255.255.255
remote-ip-mask 255.255.255.248
action allow
ike-sainfo-name
outbound-sa-fine-grained-mask
local-ip-mask 255.255.255.255
remote-ip-mask 255.255.255.255
local-port-mask 0
remote-port-mask 0