Huawei 3900 Series Commissioning Manual page 129

3900 Series Multi-Mode Base Station
Commissioning Guide
Issue 02 (2010-07-30)
Item Description
Route Public security GW: The routes to the M2000, eNodeB, and
l
temporary OM IP address should be configured.
Serving security GW: The routes to the M2000, S-GW, MME, IP
l
address of the interface to the eNodeB, S1 signaling, S1 services, and
OM IP address should be configured.
ike local The public security GW and serving security GW should be configured.
name
ike proposal The authentication method item should be digital certificate mode or
l
pre-shared key mode according to the actual network.
The authentication algorithm item must be SHA1.
l
The encryption algorithm item must be AES.
l
The DH group item must be DH group2.
l
acl It is recommended that permit ip be configured.
ike peer Public security GW: The key or certificate domain should be
l
configured according to the authentication mode specified in the ike
proposal. The local id type item must be name, the remote name item
must be p-segw, the ike proposal item should be configured
according to previous configurations, and the ike version item can be
V1 or V2. The ip pool item should be configured to allocate the
temporary OM IP for the eNodeB.
Serving security GW: The key or certificate domain should be
l
configured according to the authentication mode specified in the ike
proposal. The local id type item must be name, the remote name item
must be s-segw, the ike proposal item should be configured according
to previous configurations, and the ike version item can be V1 or V2.
ipsec The encapsulation mode item must be tunnel, the transform item must
proposal be esp, the esp authentication item must be shal, and the esp encryption
item must be aes.
ipsec policy- The public security GW and serving security should be set to the
template template mode. The Acl should be configured according to previous
configurations. If the public security GW and serving security GW are
the same, different acl values must be configured. The psf group must
be DH group2. The public security GW and serving security GW must
correspond to different ike peer values. The ipsec proposal item should
be configured according to previous configurations.
ipsec policy This item must be configured according to the template in the ipsec
policy-template.
ipsec binding The policy can be bound to the planned port according to the
to port configuration in the ipsec policy.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 Commissioning the MBTS by Using USB and M2000
6-11