Preventing Electrostatic Discharge Damage 2 | Cisco Systems C7200

Contents

			Disabling the VSA during Operation							1 - 6
			Enabling/Disabling Scheme					1 - 6
			LEDs 1 - 7
			Connectors	1 - 8
			Slot Locations 1 - 8
			Cisco 7204VXR Router				1 - 8
			Cisco 7206VXR Router				1 - 10
			Preparing for Installation			2 - 1
			Required Tools and Equipment 2 - 1
			Hardware and Software Requirements						2 - 1
			Software Requirements				2 - 2
			Hardware Requirements				2 - 2
			Restrictions		2 - 2
			Online Insertion and Removal (OIR)					2 - 3
			Safety Guidelines		2 - 3
			Safety Warnings			2 - 3
			Electrical Equipment Guidelines						2 - 4
			Preventing Electrostatic Discharge Damage 2 - 4
			Compliance with U.S. Export Laws and Regulations Regarding Encryption 2 - 5
			Removing and Installing the VSA					3 - 1
			Handling the VSA		3 - 1
			Online Insertion and Removal (OIR)					3 - 2
			Warnings and Cautions			3 - 2
			VSA Removal and Installation				3 - 2
			Configuring the VSA		4 - 1
			Overview	4 - 1
			Configuration Tasks 4 - 1
			Using the EXEC Command Interpreter							4 - 2
			Configuring an IKE Policy				4 - 2
			Disabling VSA (Optional)				4 - 4
			Configuring a Transform Set					4 - 4
			Defining a Transform Set					4 - 5
			IPSec Protocols: AH and ESP						4 - 7
			Selecting Appropriate Transforms							4 - 7
			The Crypto Transform Configuration Mode 4 - 7
			C7200 VSA (VPN Services Adapter) Installation and Configuration Guide

	iv									OL-9129-02
	iv									OL-9129-02

Image 4

Cisco Systems C7200 manual Preventing Electrostatic Discharge Damage 2

Contents

Corporate Headquarters Text Part Number OL-9129-02Page N T E N T S Preventing Electrostatic Discharge Damage 2 Creating Dynamic Crypto Maps 4 OL-9129-02 Preface Audience Organization ObjectivesChapter Title Description Obtaining Documentation Related DocumentationCisco.com Cisco Product Security Overview Documentation FeedbackProduct Documentation DVD Ordering Documentation Reporting Security Problems in Cisco Products Product Alerts and Field Notices Obtaining Technical Assistance Cisco Technical Support & Documentation Website Definitions of Service Request Severity Submitting a Service RequestObtaining Additional Publications and Information Xiv Overview Data Encryption Overview VSA Overview Screws Handle Status LED light VSA Module Front View Features This section describes the VSA features, as listed in TableFeature Description/Benefit Hardware Required Supported Standards, MIBs, and RFCs PerformanceStandards MIBs Command Purpose Enabling/Disabling the VSADisabling the VSA during Operation Enabling/Disabling Scheme Command Description of VSA Behavior Condition System is ConfiguredLEDs Connectors See -2for the VSA connectorsSlot Locations Cisco 7204VXR Router Port adapter VSA in I/O controller slot Port adapter lever Cisco 7204VXR Router Front View Cisco 7206VXR Router Cisco 7206VXR Front View Required Tools and Equipment Hardware and Software Requirements Software Requirements Hardware RequirementsRestrictions Platform Safety Warnings Safety GuidelinesOnline Insertion and Removal OIR Electrical Equipment Guidelines Preventing Electrostatic Discharge Damage Preparing for Installation OL-9129-02 Handling the VSA VSA circuit board is sensitive to ESD damage VSA Removal and Installation This section describes how to remove and install the VSA Removing and Installing the VSA VSA Removal and Installation OL-9129-02 Configuration Tasks Overview Using the Exec Command Interpreter Configuring an IKE Policy Key Management Protocol Isakmp policy configuration Config-isakmp modeOptional Specifies the authentication method within an IKE Signatures as the authentication method Configuring a Transform Set Disabling VSA Optional Defining a Transform Set Transform type Description IPSec Protocols AH and ESP Crypto Transform Configuration ModeSelecting Appropriate Transforms Configuring IPSec Ensuring That Access Lists Are Compatible with IPSecSetting Global Lifetimes for IPSec Security Associations Changing Existing Transforms Step Command Purpose Creating Crypto Access Lists Creating Crypto Map Entries Only one transform set can be specified when IKE is Authenticator keys if the transform set includes anESP authenticator algorithm Exits crypto-map configuration mode and return to Creating Dynamic Crypto Maps Optional Accesses list number or name of an Extended access list. This access list determinesIf this is configured, the data flow identity proposed For this crypto access list Monitoring and Maintaining IPSec Applying Crypto Map Sets to Interfaces Verifying IKE and IPSec Configurations Router# show crypto isakmp policy Verifying the Configuration Currentpeer 172.21.114.67 PERMIT, flags=originisacl Configuration Examples Configuring IKE Policies ExampleConfiguring IPSec Configuration Example This section provides the following configuration examples Router a Configuration Basic IPSec Configuration IllustrationCrypto map is applied to an interface Transform set defines how the traffic will be protected Router B ConfigurationSpecify the parameters to be used during an IKE negotiation Troubleshooting Tips Router# show diag Tunnel I/F Using Deny Policies in Access Lists Monitoring and Maintaining the VSA Monitor and Maintenance Commands Configuration Guidelines and Restrictions D E Set pfs command Sa command, clear crypto Entries, creatingSet session-key command Set transform-set command Features Handling Monitoring and maintaining 4 Overview Handling VPN Acceleration Module see VAM 1 IN-4