Cisco Systems 2.5 How Do I Configure a VPN on an Unsupported Interface?

11-37
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
Chapter11 Site-to-Site VPN
How Do I...
Step1 From the left frame, select VPN.
Step2 From the VPN tree, select VPN Components, and then IPSec Policies.
Step3 In the IPSec Policies table, click the IPSec policy that contains the crypto map to
which you want to add another transform set.
Step4 Click Edit.
The Edit IPSec Policy dialog box appears.
Step5 In the “Crypto Maps in this IPSec Policy” table, click the crypto map to which
you want to add another transform set.
Step6 Click Edit.
The Edit Crypt Map dialog box appears.
Step7 Click the Transform Sets tab.
Step8 In the Available Transform Sets field, click a transform set that you want to add
to the crypto map.
Step9 Click >> to add the selected transform set to the crypto map.
Step10 If you want to add additional transform sets to this crypto map, repeat Step9 and
Step 10 until you have added all the transform sets you want.
Click OK.
How Do I Configure a VPN on an Unsupported Interface?
Cisco SDM can configure a VPN over an interface type unsupported by Cisco
SDM. Before you can configure the VPN connection, you must first use the router
CLI to configure the interface. The interface must have, at a minimum, an IP
address configured, and it must be working. To verify that the connection is
working, verify that the interface status is “Up.”
After you have configured the unsupported interface using the CLI, yo u can use
Cisco SDM to configure your VPN connection. The unsupported interface will
appear in the fields that require you to choose an in terface for the VPN
connection.