Cisco Systems SA-ISA, SM-ISM manual Configuring the ISA and ISM

Page 4

Contents

( D R A F T L A B E L ) A L P H A D R A F T - C I S C O C O N F I D E N T I A L

 

Interoperability Between ISA/ISM and VAM

2-2

 

Safety Guidelines 2-3

 

 

 

 

Safety Warnings

2-3

 

 

 

Electrical Equipment Guidelines 2-5

 

 

Preventing Electrostatic Discharge Damage

2-5

 

Compliance with U.S. Export Laws and Regulations Regarding Encryption 2-6

 

Removing and Installing the ISA and the ISM

 

C H A P T E R 3

3-1

 

Handling the ISA or the ISM

3-1

 

 

Online Insertion and Removal

3-2

 

 

Warnings and Cautions

3-3

 

 

 

ISA or ISM Removal and Installation

3-4

 

 

Cisco 7100

Series—Removing and Installing the ISM

3-5

 

Cisco 7200

Series—Removing and Installing the ISA

3-6

 

Configuring the ISA and ISM 4-1

 

 

C H A P T E R 4

 

 

 

Overview 4-1

 

 

 

 

Using the EXEC Command Interpreter

4-2

 

 

Enabling MPPE

4-2

 

 

 

Configuring IKE

4-3

 

 

 

Configuring IPSec 4-4

 

 

Creating Crypto Access Lists

4-4

Defining a Transform Set 4-5

 

Creating Crypto Maps

4-7

 

Applying Crypto Maps to Interfaces

4-9

Verifying Configuration

4-9

 

IPSec Example 4-12

 

 

Integrated Services Adapter and Integrated Services Module Installation and Configuration

 

ii

OL-3575-01 B0

 

 

 

Image 4
Contents Corporate Headquarters Text Part Number OL-3575-01 B0Copyright 1999- 2003 Cisco Systems, Inc All rights reserved N T E N T S Configuring the ISA and ISM Preface ObjectivesInstallation Warning AudienceDocument Organization Document ConventionsSection Title Description Boldface fontItalic screen font Indicates a comment lineTerms and Acronyms ViiRelated Documentation ViiiCisco 7100 series routers Obtaining Documentation Cisco.comOrdering Documentation Documentation CD-ROMDocumentation Feedback Obtaining Technical Assistance Technical Assistance CenterObtaining Additional Publications and Information Cisco TAC Escalation CenterXiv Overview ISA and ISM OverviewData Encryption Overview Features Feature DescriptionPort Adapter Slot Locations on the Supported Platforms Cisco 7100 Series Routers Slot NumberingCisco 7200 Series Routers Slot Numbering Port adapter in slot ISM in slotLEDs LEDsBoot LED Label Color State FunctionOL-3575-01 B0 Preparing for Installation Required Tools and EquipmentPlatform Recommended Minimum Cisco IOS Release Safety Guidelines Safety WarningsEncryption mppe command ISA and ISA ISA with VAMPreparing for Installation Safety Guidelines Electrical Equipment Guidelines Preventing Electrostatic Discharge DamageOL-3575-01 B0 Removing and Installing the ISA and the ISM Handling the ISA or the ISMOnline Insertion and Removal Handling the ISMRemoving and Installing the ISA and the ISM ISA or ISM Removal and Installation Cisco 7100 Series-Removing and Installing the ISM StepCisco 7200 Series-Removing and Installing the ISA GuideConfiguring the ISA and ISM OverviewUsing the Exec Command Interpreter Enter controller configuration mode onEnables Mppe encryption Enabling MppeConfiguring IKE Config-isakmp command modeIdentify the policy to create, and enter Specify the encryption algorithmConfiguring IPSec Creating Crypto Access ListsDefining a Transform Set Step Command Purpose Creating Crypto Maps Crypto map configuration mode Specify an extended access list. ThisAccess list determines which traffic is Exit crypto map configuration modeVerifying Configuration Exit interface configuration modeApplying Crypto Maps to Interfaces Apply a crypto map set to an interfaceCommand Purpose Router# show crypto ipsec sa interface Ethernet0 Configuring the ISA and ISM IPSec Example IPSec ExampleRouter B Configuration OL-3575-01 B0 D E IN-2