Cisco 7100 Series Especificaciones descargar pdf (Pagina 81)

Extranet VPN Business Scenario 4-9

Step 2—Configuring Encryption and an IPSec Tunnel

Step 2—Conﬁguring Encryption and an IPSec Tunnel

For the ISM in slot 5 of Cisco 7100 series routers to provide encryption and IPSec

tunneling services, you must complete the following steps:

1 Conﬁguring a Different Shared Key

Note The headquarters router and business partner router conﬁgured in this chapter use

the same Internet Key Exchange (IKE) policy and priority number—policy 1— that was

conﬁgured in the “Conﬁguring IKE Policies” section on page 3-13, but with a different

shared key. Only a different key for policy 1 is conﬁgured in this chapter. See the

“Conﬁguring IKE Policies” section on page 3-13 for instructions on how to conﬁgure IKE

policies. If you choose to conﬁgure additional IKE policies, we recommend using a unique

hash algorithm and authentication method for each additional IKE policy.

2 Conﬁguring IPSec and IPSec Tunnel Mode (Creating access lists and transform sets,

and conﬁguring IPSec in tunnel mode)

3 Conﬁguring Crypto Maps (Creating crypto maps and assigning maps to interfaces)

Optionally, you can conﬁgure Certiﬁcation Authority (CA) interoperability. This guide

does not explain how to conﬁgure CA interoperability on your Cisco 7100 series router.

Refer to the “IP Security and Encryption” part of the Security Conﬁguration Guide and the

Security Command Reference publications for detailed information on conﬁguring CA

interoperabilty.

Note This section only contains basic conﬁguration information for enabling

encryption and IPSec tunneling services. For overview information on the ISM and

conﬁguring IKE policies, IPSec, and crypto maps, see the “Step 3—Conﬁguring

Encryption” section on page 3-11. Refer to the “IP Security and Encryption” part of the

Security Conﬁguration Guide and the Security Command Reference publications for

detailed conﬁguration information on IPSec, IKE, and CA.

Refer to the Integrated Service Adapter and Integrated Service Module Installation and

Conﬁguration publication for detailed conﬁguration information on the ISM.

1 2 ... 76 77 78 79 80 81 82 83 84 85 86 ... 111 112

Sin comentarios

Cisco 7100 Series Especificaciones Pagina 81