It is mandatory to execute:
[Branch_Router] ike proposal 5 [Branch_Router-ike-proposal-5] encryption-algorithm aes-cbc-256 [Branch_Router-ike-proposal-5] authentication-algorithm sha256 [Branch_Router] ike peer HQ v1 [Branch_Router-ike-peer-HQ] pre-shared-key cipher SecureKey@2024 [Branch_Router-ike-peer-HQ] remote-address 203.0.113.10 [Branch_Router] ipsec proposal huawei_proposal [Branch_Router-ipsec-proposal-huawei_proposal] esp authentication-algorithm sha256 [Branch_Router] ipsec policy Branch_to_HQ 1 isakmp [Branch_Router-ipsec-policy-isakmp-Branch_to_HQ-1] security acl 3000 [Branch_Router-ipsec-policy-isakmp-Branch_to_HQ-1] ike-peer HQ [Branch_Router-ipsec-policy-isakmp-Branch_to_HQ-1] proposal huawei_proposal [Branch_Router] interface GigabitEthernet 0/0/0 [Branch_Router-GigabitEthernet0/0/0] ipsec policy Branch_to_HQ This establishes an encrypted tunnel, ensuring data privacy over the public internet. The AR651’s hardware supports HQoS (Hierarchical QoS). To prioritize voice traffic (SIP/RTP), classify and mark packets: huawei ar651 configuration guide
[Branch_Router] interface GigabitEthernet 0/0/0 [Branch_Router-GigabitEthernet0/0/0] ip address dhcp-alloc [Branch_Router-GigabitEthernet0/0/0] nat outbound 2000 [Branch_Router-GigabitEthernet0/0/0] quit [Branch_Router] acl number 2000 [Branch_Router-acl-basic-2000] rule 5 permit source 192.168.0.0 0.0.255.255 The AR651 often includes two SIM slots. To configure APN (Access Point Name) for cellular: It is mandatory to execute: [Branch_Router] ike proposal