Cisco Systems 520 series manual Configure Group Policy Information, Domain name

Chapter 7 Configuring VPNs Using an IPsec Tunnel and Generic Routing Encapsulation

Configure a VPN

Configure Group Policy Information

Perform these steps to configure the group policy, beginning in global configuration mode:

	Command or Action		Purpose
Step 1
	crypto isakmp client configuration group		Creates an IKE policy group that contains
	{group-name default}		attributes to be downloaded to the remote client.
	Example:		Also enters Internet Security Association Key
			Management Protocol (ISAKMP) policy
	Router(config)# crypto isakmp client		configuration mode.
	configuration group rtr-remote
	Router(config-isakmp-group)#
Step 2
	key name		Specifies the IKE pre-shared key for the group
			policy.
	Example:
	Router(config-isakmp-group)# key
	secret-password
	Router(config-isakmp-group)#
Step 3
	dns primary-server		Specifies the primary Domain Name Service
			(DNS) server for the group.
	Example:		Note You may also want to specify Windows
	Router(config-isakmp-group)# dns 10.50.10.1		Internet Naming Service (WINS) servers
	Router(config-isakmp-group)#		for the group by using the wins command.
Step 4
	domain name		Specifies group domain membership.
	Example:
	Router(config-isakmp-group)# domain
	company.com
	Router(config-isakmp-group)#
Step 5
	exit		Exits IKE group policy configuration mode, and
			enters global configuration mode.
	Example:
	Router(config-isakmp-group)# exit
	Router(config)#
Step 6
	ip local pool {default poolname}		Specifies a local address pool for the group.
	[low-ip-address [high-ip-address]]		For details about this command and additional
	Example:		parameters that can be set, see the Cisco IOS Dial
			Technologies Command Reference.
	Router(config)# ip local pool dynpool
	30.30.30.20	30.30.30.30
	Router(config)#

Cisco Secure Router 520 Series Software Configuration Guide

7-4 OL-14210-01