Cisco 7100 Series Spezifikationen PDF herunterladen (Seite 85)

Extranet VPN Business Scenario 4-13

Configuring IPSec and IPSec Tunnel Mode

Verifying Crypto Access Lists

To verify the conﬁguration:

• Enter the show access-lists 111 EXEC command to see access list’s attributes.

hq-sanjose# show access-lists 111

Extended IP access list 111

permit ip host 10.2.2.2 host 10.1.5.3

Tips

If you have trouble, make sure you are specifying the correct access list number.

Deﬁning Transform Sets and Conﬁguring IPSec Tunnel Mode

To deﬁne a transform set and conﬁgure IPSec tunnel mode, complete the following steps

starting in global conﬁguration mode:

Step Command Purpose

hq-sanjose(config)# crypto ipsec

transform-set proposal4 ah-sha-hmac

esp-des esp-sha-hmac

Deﬁne a transform set and enter crypto-transform

conﬁguration mode. This example combines AH

transform ah-sha-hmac, ESP

encryption transform

esp-des, and ESP

authentication transform

esp-sha-hmac in the transform set proposal4.

There are complex rules deﬁning which entries you

can use for the transform arguments. These rules are

explained in the command description for the crypto

ipsec transform-set command. You can also use the

crypto ipsec transform-set? command, in global

conﬁguration mode, to view the available transform

arguments.

1 2 ... 80 81 82 83 84 85 86 87 88 89 90 ... 111 112

Keine Kommentare

Cisco 7100 Series Spezifikationen Seite 85