Cisco 7100 Series Spezifikationen PDF herunterladen (Seite 60)

Step 3—Configuring Encryption

Cisco 7100 Series VPN Configuration Guide

3-30

Tips

If you have trouble, make sure you are using the correct IP addresses.

Applying Crypto Maps to Interfaces

You need to apply a crypto map set to each interface through which IPSec trafﬁc will ﬂow.

Applying the crypto map set to an interfaceinstructs the router to evaluateall the interface’s

trafﬁc against the crypto map set and to use the speciﬁed policy during connection or SA

negotiation on behalf of trafﬁc to be protected by crypto.

To apply a crypto map set to an interface, complete the following steps starting in global

conﬁguration mode:

Step Command Purpose

hq-sanjose(config)# interface

serial 1/0

Specify a physical interface on which to apply the

crypto map and enter interface conﬁguration

mode. This example speciﬁes serial interface 1/0

on the headquarters router.

hq-sanjose(config-if)# crypto map

s1first

Apply the crypto map set to the physical interface.

This example conﬁgures crypto map s1ﬁrst,

which was created in the “Creating Crypto Map

Entries” section on page 3-28.

hq-sanjose(config-if)# exit

hq-sanjose(config)#

Exit back to global conﬁguration mode.

hq-sanjose(config)# interface

tunnel 0

Specify the tunnel interface on which to apply the

crypto map and enter interface conﬁguration

mode. This example speciﬁes tunnel interface 0

on the headquarters router.

hq-sanjose(config-if)# crypto map

s1first

Apply the crypto map set to the tunnel interface.

This example conﬁgures crypto map s1ﬁrst on the

tunnel interface 0.

hq-sanjose(config-if)# exit

hq-sanjose(config)#

Exit back to global conﬁguration mode.

1 2 ... 55 56 57 58 59 60 61 62 63 64 65 ... 111 112

Keine Kommentare

Cisco 7100 Series Spezifikationen Seite 60