Cisco 7100 Series Especificaciones descargar pdf (Pagina 90)

Step 2—Configuring Encryption and an IPSec Tunnel

Cisco 7100 Series VPN Configuration Guide

4-18

Creating Crypto Map Entries

To create crypto map entries that will use IKE to establish the SAs, complete the following

steps starting in global conﬁguration mode:

Step Command Purpose

hq-sanjose(config)# crypto map s4second

local-address serial 2/0

Create the crypto map and specify a

local address (physical interface) to be

used for the IPSec trafﬁc. This example

creates crypto map s4second and

speciﬁes serial interface 2/0 of the

headquarters router as the local address.

hq-sanjose(config)# crypto map s4second 2

ipsec-isakmp

Enter crypto map conﬁguration mode,

specify a sequence number for the

crypto map you created in Step 1, and

conﬁgure the crypto map to use IKE to

establish SAs. This example conﬁgures

sequence number 2 and IKE for crypto

map s4second.

hq-sanjose(config-crypto-map)# match address 111

Specify an extended access list. This

access list determines which trafﬁc is

protected by IPSec and which trafﬁc is

not be protected by IPSec. This

example conﬁgures access list 111,

which was created in the “Creating

Crypto Access Lists” section on

page 4-12.

hq-sanjose(config-crypto-map)# set peer

172.16.2.7

Specify a remote IPSec peer (by host

name or IP address). This is the peer to

which IPSec protected trafﬁc can be

forwarded. This example speciﬁes

serial interface 1/0 (172.16.2.7) on the

business partner router.

1 2 ... 85 86 87 88 89 90 91 92 93 94 95 ... 111 112

Sin comentarios

Cisco 7100 Series Especificaciones Pagina 90