H3C Technologies H3C SecPath F1000-E - Manual (Page 172)

160
traffic arrives at Device B, it will be dropped if it matches a permit statement in the ACL referenced in the
applied IPsec policy.
The configurations on Device A are shown in
Figure 101 , Figure 102 , and Figure 103 .
Figure 101 ACL 3000 configuration on Device A
Figure 102 ACL 3001 configuration on Device A
Figure 103 IPsec policy configuration on Device A
The configurations on Device B are shown in Figure 104 , and Figure 105 .
Figure 104 ACL 3001 configuration on Device B