Cisco WS-SVC-IPSEC-1= - IPSec VPN Services Module Technical Information

Corporate Headquarters:Copyright © 2002–2003 Cisco Systems, Inc. All rights reserved.Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-17

10IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Installing and Removing the VPN ModuleInstalling and Rem

11IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Installing and Removing the VPN ModuleWarningOnly traine

12IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Installing and Removing the VPN ModuleCaution During thi

13IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Installing and Removing the VPN ModuleStep 2 Loosen the

14IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Installing and Removing the VPN ModuleWarningBefore you

17IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Installing and Removing the VPN ModuleVertical slotsa. P

20IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Installing and Removing the VPN ModuleFigure 8 Ejector L

21IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleConfiguring a VPN

22IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleNote Switching to

23IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module• WAN interface:–s

2IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0ContentsContentsThis publication consists of these sectio

24IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleRouted Port Mode S

25IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleVPN Module Configu

26IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module• Switched Port An

27IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleWhen you enter the

28IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleMiscellaneous Guid

29IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleHandling Multicast

30IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module• If you insert a

31IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module• The interface MT

32IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleTo remove the inte

33IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleConfiguring the VP

3IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Understanding How the VPN Module WorksWhen you configure

34IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module• As with single V

35IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module set transform-set

36IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module crypto connect vl

37IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleFor complete confi

38IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleActive# show runBu

39IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module standby track Gig

40IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleThe following is a

41IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module standby delay min

42IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleUsing IPSec NAT Tr

43IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleThe following is a

4IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Understanding How the VPN Module WorksVPN Module Outside

44IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Moduleredundancymain-cpu

45IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleUsing Dead-Peer-De

46IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleCrypto Connection

47IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module crypto connect vl

48IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module!interface Gigabit

49IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module crypto connect vl

50IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleFollow these guide

51IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleUsing QoSNote This

52IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleConfiguring a VPN

53IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleStep 5 From privil

5IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Supported FeaturesPort VLAN 501 and port VLAN 502 are the

54IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleConfiguring a VPN

55IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleStep 6 From interf

56IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleFigure 12 Trunk Po

57IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleStep 6 From interf

58IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration ExamplesDisplaying the VPN Running StateUs

59IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration ExamplesCatalyst Switch 1 (Access Port)The

60IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples no ip address flowcontrol receive

61IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration ExamplesFigure 13 Access Port Configuration

62IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration ExamplesCatalyst Switch 2 (Access Port)The

63IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examplesinterface GigabitEthernet5/1 switc

6IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Supported Features• Capacity–8000 tunnels (no IKE keepali

64IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration ExamplesCatalyst Switch 1 (Routed Port)The

65IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examplesinterface GigabitEthernet5/2 switc

66IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration ExamplesFigure 14 Routed Port Configuration

67IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examplesredundancy main-cpu auto-sync sta

68IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examplesinterface Vlan1 no ip address shut

69IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples!crypto isakmp policy 1 encr 3des

70IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples!!ip access-list extended AEO-101

71IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration ExamplesCatalyst Switch 2 (Trunk Port)The

72IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examplesinterface GigabitEthernet5/1 switc

73IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration ExamplesATM PortsNote This section applies

7IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Hardware and Software Requirements–PA-MC-2T1: 2-port mult

74IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples auto-sync standard!controller T3

75IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples crypto connect vlan 6!interface S

76IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples cdp enable!interface GigabitEther

77IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration ExamplesCatalyst Switch 2 (ATM Port)The Ca

78IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples multilink-group 1...!interface Mu

79IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples ip address 10.10.20.254 255.255.2

80IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration ExamplesCatalyst Switch 1 (Frame Relay Por

81IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examplesvlan 1 tb-vlan1 1002 tb-vlan2 1003

82IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examplesinterface FastEthernet3/2 no ip ad

83IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples clock source internal frame-relay

8IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Hardware and Software RequirementsHardware RequirementsTh

84IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples!crypto isakmp policy 1 encr 3des

85IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples no ip address no fair-queue!inter

86IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examplesno ip http serverno ip http secure

87IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples flowcontrol send off switchport s

88IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples switchport mode trunk cdp enable!

89IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples!boot system flash sup-bootflash:!

90IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples no ip address snmp trap link-stat

91IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples!!no ip domain-lookup!!no mls ip m

92IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples cdp enable!interface Vlan1 no ip

93IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examplescrypto isakmp policy 1 encr 3des a

9IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Front Panel DescriptionNote The FlexWAN module and the Op

94IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples!line con 0line vty 0 4 login tran

95IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples!!! Enables qos globallymls qos!cr

96IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples switchport trunk allowed vlan 1,1

97IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examplescrypto ipsec transform-set 3des_sh

98IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Regulatory Standards Complianceno ip http serverno ip ht

99IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Obtaining DocumentationDocumentation CD-ROMCisco documen

100IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Obtaining Technical AssistanceObtaining Technical Assis

101IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Obtaining Additional Publications and InformationAll cu

102IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Obtaining Additional Publications and Information• Inte