Cisco Systems SM-ISM, SA-ISA manual Preface, Objectives

Page 5

Preface

This preface describes the objectives and organization of this document and explains how to find additional information on related products and services. This preface contains the following sections:

Objectives, page iii

Audience, page iv

Installation Warning, page iv

Document Organization, page v

Document Conventions, page v

Obtaining Documentation, page x

Obtaining Technical Assistance, page xii

Obtaining Additional Publications and Information, page xiii

Objectives

This document contains instructions and procedures for installing and configuring the Integrated Services Adapter (ISA) in Cisco 7200 series routers and the Integrated Services Module (ISM) in Cisco 7100 series routers. Also contained in this document are basic configuration steps and examples of router commands and displays.

The ISA is a single-width service adapter and the ISM is a single-width service module. Each provides high-performance, hardware-assisted tunneling and encryption services suitable for virtual private network (VPN) remote access, site-to-site intranet, and extranet applications. The ISA and the ISM offload IP Security Protocol (IPSec) and Microsoft Point to Point Encryption (MPPE) processing from the main processor of the Cisco 7200 series or Cisco 7100 series router, thus freeing router resources for other tasks.

Although both the ISA and the ISM provide the same functionality, they are physically unique cards designed for different router platforms, with their own part numbers:

SM-ISM(=)—Cisco 7100 series routers

SA-ISA(=)—Cisco 7200 series routers

Note The information provided in this document applies to both the ISA and the ISM unless specifically stated otherwise.

Integrated Services Adapter and Integrated Services Module Installation and Configuration

 

OL-3575-01 B0

iii

 

Image 5
Contents Text Part Number OL-3575-01 B0 Corporate HeadquartersCopyright 1999- 2003 Cisco Systems, Inc All rights reserved N T E N T S Configuring the ISA and ISM Objectives PrefaceAudience Installation WarningDocument Conventions Document OrganizationSection Title Description Boldface fontIndicates a comment line Italic screen fontVii Terms and AcronymsViii Related DocumentationCisco 7100 series routers Cisco.com Obtaining DocumentationDocumentation Feedback Documentation CD-ROMOrdering Documentation Technical Assistance Center Obtaining Technical AssistanceCisco TAC Escalation Center Obtaining Additional Publications and InformationXiv ISA and ISM Overview OverviewData Encryption Overview Feature Description FeaturesCisco 7100 Series Routers Slot Numbering Port Adapter Slot Locations on the Supported PlatformsPort adapter in slot ISM in slot Cisco 7200 Series Routers Slot NumberingLEDs LEDsLED Label Color State Function BootOL-3575-01 B0 Required Tools and Equipment Preparing for InstallationPlatform Recommended Minimum Cisco IOS Release Safety Warnings Safety GuidelinesEncryption mppe command ISA and ISA ISA with VAMPreparing for Installation Safety Guidelines Preventing Electrostatic Discharge Damage Electrical Equipment GuidelinesOL-3575-01 B0 Handling the ISA or the ISM Removing and Installing the ISA and the ISMHandling the ISM Online Insertion and RemovalRemoving and Installing the ISA and the ISM ISA or ISM Removal and Installation Step Cisco 7100 Series-Removing and Installing the ISMGuide Cisco 7200 Series-Removing and Installing the ISAOverview Configuring the ISA and ISMEnter controller configuration mode on Using the Exec Command InterpreterEnables Mppe encryption Enabling MppeConfig-isakmp command mode Configuring IKEIdentify the policy to create, and enter Specify the encryption algorithmCreating Crypto Access Lists Configuring IPSecDefining a Transform Set Step Command Purpose Creating Crypto Maps Specify an extended access list. This Crypto map configuration modeAccess list determines which traffic is Exit crypto map configuration modeExit interface configuration mode Verifying ConfigurationApplying Crypto Maps to Interfaces Apply a crypto map set to an interfaceCommand Purpose Router# show crypto ipsec sa interface Ethernet0 IPSec Example Configuring the ISA and ISM IPSec ExampleRouter B Configuration OL-3575-01 B0 D E IN-2