

Configure a default route from the HUAWEI firewall_A to the Internet.service-manage ping permit /*Allow the Cisco firewall to ping the interface. ip service-manage ping permit /*Allow the Cisco firewall to ping the interface. Set IP addresses for interfaces and assign them to security zones.Enable the IPSec policy on the interface.Configure an IPSec policy, including defining the data flow to be protected, configuring an IPSec proposal, creating an IKE proposal, and configuring a pre-shared key.Configure the default route from the Cisco firewall to the Internet.Set IP addresses for interfaces and enable access control on the interfaces.Configure an Untrust-Trust interzone security policy to allow the post-NAT packets to pass through HUAWEI firewall_B.Apply the IPSec policy to an interface.Configure an IPSec policy, including defining the data flow to be protected, configuring an IPSec proposal, creating an IKE proposal, configuring an IKE peer, and configuring IPSec NAT traversal.Configure an interzone security policy to allow IKE negotiation packets, original IPSec packets, and decapsulated IPSec packets to pass through HUAWEI firewall_A.

Configure the default route from the HUAWEI firewall_A to the Internet.Set IP addresses for interfaces and assign the interfaces to security zones.
