Cisco Systems C7200 manual Configuring the VSA, Overview, Configuration Tasks, C H A P T E R

C H A P T E R 4

Configuring the VSA

This chapter contains the information and procedures needed to configure the C7200-VSA (VPN Services Adapter). This chapter contains the following sections:

•Overview, page 4-1

•Configuration Tasks, page 4-1

•Configuration Examples, page 4-18

•Basic IPSec Configuration Illustration, page 4-19

•Troubleshooting Tips, page 4-21

•Monitoring and Maintaining the VSA, page 4-23

Overview

The VSA in the I/O controller slot provides encryption services for the I/O controller port in the Cisco 7204VXR or Cisco 7206VXR router with a NPE-G2 processor. If you have previously configured IPSec on the router and you install a VSA, the VSA automatically performs encryption services.

Note The Cisco 7204VXR and the 7206VXR routers support a single VSA.

There are no interfaces to configure on the VSA.

This section only contains basic configuration information for enabling encryption and IPSec tunneling services. Refer to the “IP Security and Encryption” part of the Security Configuration Guide and the Security Command Reference guide for detailed configuration information on IPSec, IKE, and CA.

Configuration Tasks

On power up, the VSA is fully functional and does not require any configuration commands. However, for the VSA to provide encryption services, you must complete the steps in the following sections:

•Using the EXEC Command Interpreter, page 4-2(required)

•Configuring an IKE Policy, page 4-2(required)

•Configuring a Transform Set, page 4-4(required)

•Configuring IPSec, page 4-8(required)

C7200 VSA (VPN Services Adapter) Installation and Configuration Guide

OL-9129-02 4-1