Cisco 7100 Series Spezifikationen PDF herunterladen (Seite 58)

Step 3—Configuring Encryption

Cisco 7100 Series VPN Configuration Guide

3-28

Creating Crypto Map Entries

To create a crypto map entry that will use IKE to establish the SAs, complete the following

steps starting in global conﬁguration mode:

Step Command Purpose

hq-sanjose(config)# crypto map s1first

local-address serial 1/0

Create the crypto map and specify a

local address (physical interface) to be

used for the IPSec trafﬁc. This example

creates crypto map s1ﬁrst and speciﬁes

serial interface 1/0 of the headquarters

router as the local address.

hq-sanjose(config)# crypto map s1first 1

ipsec-isakmp

Enter crypto map conﬁguration mode,

specify a sequence number for the

crypto map you created in Step 1, and

conﬁgure the crypto map to use IKE to

establish SAs. This example conﬁgures

sequence number 1 and IKE for crypto

map s1ﬁrst.

hq-sanjose(config-crypto-map)# match address 101

Specify an extended access list. This

access list determines which trafﬁc is

protected by IPSec and which trafﬁc is

not be protected by IPSec. This

example conﬁgures access list 101,

which was created in the “Creating

Crypto Access Lists” section on

page 3-21.

hq-sanjose(config-crypto-map)# set peer

172.17.2.5

Specify a remote IPSec peer (by host

name or IP address). This is the peer to

which IPSec protected trafﬁc can be

forwarded. This example speciﬁes

serial interface 1/0 (172.17.2.5) on the

remote ofﬁce router.

1 2 ... 53 54 55 56 57 58 59 60 61 62 63 ... 111 112

Keine Kommentare

Cisco 7100 Series Spezifikationen Seite 58