Cisco PIX 525 Especificaciones descargar pdf (Pagina 235)

100

101

6-23

Cisco PIX Firewall and VPN Configuration Guide

78-15033-01

Chapter 6 Configuring IPSec and Certification Authorities

Using Dynamic Crypto Maps

Step 1 Assign an access list to a dynamic crypto map entry:

crypto dynamic-map dynamic-map-name dynamic-seq-num match address access-list-name

This determines which traffic should be protected and not protected.

For example:

crypto dynamic-map dyn1 10 match address 101

In this example, access list 101 is assigned to dynamic crypto map “dyn1.” The map’s sequence number

is 10.

Step 2 Specify which transform sets are allowed for this dynamic crypto map entry. List multiple transform sets

in order of priority (highest priority first).

crypto dynamic-map dynamic-map-name dynamic-seq-num set transform-set transform-set-name1,

[transform-set-name2, …transform-set-name9]

For example:

crypto dynamic-map dyn 10 set transform-set myset1 myset2

In this example, when traffic matches access list 101, the security association can use either “myset1”

(first priority) or “myset2” (second priority) depending on which transform set matches the peer’s

transform sets.

Step 3 Specify security association lifetime for the crypto dynamic map entry, if you want the security

associations for this entry to be negotiated using different IPSec security association lifetimes other than

the global lifetimes:

crypto dynamic-map dynamic-map-name dynamic-seq-num set security-association lifetime

{seconds seconds | kilobytes kilobytes}

For example:

crypto dynamic-map dyn1 10 set security-association lifetime 2700

This example shortens the timed lifetime for dynamic crypto map “dyn1 10” to 2700 seconds

(45 minutes). The time volume lifetime is not changed.

1 2 ... 230 231 232 233 234 235 236 237 238 239 240 ... 465 466

Comentarios a estos manuales

Sin comentarios

Cisco PIX 525 Especificaciones Pagina 235

Comentarios a estos manuales

Relacionado con productos y manuales para Los Sistemas De Control De Acceso De Seguridad Cisco PIX 525