Cisco 7100 Series Spezifikationen PDF herunterladen (Seite 25)

Before You Begin 2-3

Considerations

The following are considerations to observe when conﬁguring a VPN on your Cisco 7100

series router:

• Syslog—Set up a syslog host, such as a CiscoWorks Essentials Workstation, and

conﬁgure all the routers in the network to use the syslog host. Logging all syslog

messages from the routers allows you to determine when signiﬁcant events, like

conﬁguration changes, occurred.

• Telnet and Console Access—In client-initiated or network access server

(NAS)-initiated access VPN environments, implement Terminal Access Controller

Access Control System Plus (TACACS+) or Remote Access Dial-In User Service

(RADIUS) security for Telnet and console access to the router. Doing so logs all access

to the router. The addition of access lists to only allow Telnet access from particular

source IP addressees helps to secure the router.

• Access Lists—Use access list numbers and names consistently to help manage and

troubleshoot conﬁgurations.

• Template Conﬁgurations—Use a conﬁguration template when deploying many routers

that require consistent conﬁgurations.

• Tunneling—Observe the following when conﬁguring tunneling:

— To avoid anomalies that occur on physical interfaces, conﬁgure each tunnel source

and destination on a loopback interface. A loopback interface is a virtual interface

that is always up and allows routing protocols to stay up even if the physical

interface is down.

— Process switching and fast switching of the GRE, IPSec, L2F, and L2TP tunneling

protocols, and Cisco Express Forwarding (CEF) of the IPSec tunneling protocol is

supported on Cisco 7100 series routers in Cisco IOS Release 12.0(4)XE or a later

12.0 XE software release, or Cisco IOS Release 12.0(6)T or a later 12.0 T software

release. CEF support of the L2F and L2TP tunneling protocols will be supported on

Cisco 7100seriesroutersin a futuremaintenancereleaseofCisco IOS softwareand

will be announced in the release notes that ship with the software.

1 2 ... 20 21 22 23 24 25 26 27 28 29 30 ... 111 112

Keine Kommentare

Cisco 7100 Series Spezifikationen Seite 25