Cisco 7100 Series Especificaciones descargar pdf (Pagina 62)

Step 4—Configuring Cisco IOS Firewall Features

Cisco 7100 Series VPN Configuration Guide

3-32

Verifying Crypto Map Interface Associations

To verify the conﬁguration:

• Enter the show crypto map interface serial 1/0 EXEC command to see the crypto

maps applied to the interface.

hq-sanjose# show crypto map interface serial 1/0

Crypto Map "s1first" 1 ipsec-isakmp

Peer = 172.17.2.5

Extended IP access list 101

access-list 101 permit gre host 172.17.2.4 host 172.17.2.5

Current peer:172.17.2.5

Security association lifetime:4608000 kilobytes/1000 seconds

PFS (Y/N):N

Transform sets={ proposal1, }

• Enter the showcrypto map interface tunnel 0 EXEC command to see the crypto maps

applied to the tunnel interface.

hq-sanjose# show crypto map interface tunnel 0

Crypto Map "s1first" 1 ipsec-isakmp

Peer = 172.17.2.5

Extended IP access list 101

access-list 101 permit gre host 172.17.2.4 host 172.17.2.5

Current peer:172.17.2.5

Security association lifetime:4608000 kilobytes/1000 seconds

PFS (Y/N):N

Transform sets={ proposal1, }

Step 4—Conﬁguring Cisco IOS Firewall Features

Cisco IOS software provides an extensive set of security features that allow you to

conﬁgure a simple or elaborate ﬁrewall, according to your particular requirements. When

you conﬁgure Cisco IOS Firewall features on your Cisco router, you turn your router into

an effective, robust ﬁrewall.

CiscoIOS Firewallfeatures are designedtopreventunauthorized, externalindividualsfrom

gaining access to your internal network, and to block attacks on your network, while at the

same time allowing authorized users to access network resources.

1 2 ... 57 58 59 60 61 62 63 64 65 66 67 ... 111 112

Sin comentarios

Cisco 7100 Series Especificaciones Pagina 62