ACL-based IPsec tasks at a glance

To configure ACL-based IPsec, perform the following tasks:

1. Configuring an ACL

2. Configuring an IPsec transform set

3. Configuring an IPsec policy

   Choose one of the following tasks:

   • Configuring a manual IPsec policy

   • Configuring an IKE-based IPsec policy

4. Applying an IPsec policy to an interface

5. (Optional.) Configuring accessibility features for ACL-based IPsec

   • Enabling ACL checking for de-encapsulated packets

   • Configuring IPsec anti-replay

   • Configuring IPsec anti-replay redundancy

   • Binding a source interface to an IPsec policy

   • Enabling QoS pre-classify

   • Configuring the DF bit of IPsec packets

   • Configuring IPsec RRI

   • Configuring the global IPsec SA lifetime and idle timeout

   • Configuring IPsec fragmentation

   • Setting the maximum number of IPsec tunnels

6. (Optional.) Configuring logging and SNMP notification for IPsec.

   • Enabling logging for IPsec packets

   • Configuring SNMP notifications for IPsec