Cisco 7100 Series Spezifikationen PDF herunterladen (Seite 51)

Intranet VPN Business Scenario 3-21

Configuring IPSec

Creating Crypto Access Lists

Crypto access lists are used to deﬁne which IP trafﬁcwill beprotected by crypto and which

trafﬁc will not beprotected bycrypto. (These accesslists arenot the sameas regular access

lists, which determine what trafﬁc to forward or block at an interface.) For example, you

can create access lists to protect all IP trafﬁc between the headquarters router and remote

ofﬁce router or Telnet trafﬁc between the headquarters router and remote ofﬁce router.

The access lists themselves are not speciﬁc to IPSec. It is the crypto map entry referencing

the speciﬁc access list that deﬁnes whether IPSec processing is applied to the trafﬁc

matching a permit in the access list.

To create a crypto access list, enter the following command in global conﬁguration mode:

Verifying Crypto Access Lists

To verify the conﬁguration:

• Enter the show access-lists 101 EXEC command to see the access list’s attributes.

hq-sanjose# show access-lists 101

Extended IP access list 101

permit gre host 172.17.2.4 host 172.17.2.5

Tips

If you have trouble, make sure you are specifying the correct access list number.

Command Purpose

hq-sanjose(config)# access-list 101 permit

gre host 172.17.2.4 host 172.17.2.5

Specify conditions to determine which IP packets are

protected.

(Enable or disable crypto for trafﬁc that

matches these conditions.) This example conﬁgures

access list 101 to encrypt all GRE trafﬁc between serial

interface 1/0 on the headquarters router (IP address

172.17.2.4) and serial interface 1/0 on the remote ofﬁce

router (IP address 172.17.2.5).

1 You specify conditions using an IP access list designated by either a number or a name. The access-list command designates a

numbered extended access list; the ip access-list extended command designates a named access list.

1 2 ... 46 47 48 49 50 51 52 53 54 55 56 ... 111 112

Keine Kommentare

Cisco 7100 Series Spezifikationen Seite 51