Cisco Systems C819GUK9, C819HG4GVK9 manual Configuration Example

Chapter 9 Configuring Security Features

Configuring VPN

	Command or Action	Purpose
Step 4
	mode {client network-extension network	Specifies the VPN mode of operation.
	extension plus}
	Example:
	Router(config-crypto-ezvpn)# mode client
	Router(config-crypto-ezvpn)#
Step 5
	exit	Returns to global configuration mode.
	Example:
	Router(config-crypto-ezvpn)# exit
	Router(config)#
Step 6
	crypto isakmp keepalive seconds	Enables dead peer detection messages. Time
	Example:	between messages is given in seconds, with a
		range of 10 to 3600.
	Router(config-crypto-ezvpn)# crypto isakmp
	keepalive 10
	Router(config)#
Step 7
	interface type number	Enters the interface configuration mode for the
	Example:	interface to which you want the Cisco Easy VPN
		remote configuration applied.
	Router(config)# interface fastethernet 4	Note	For routers with an ATM WAN interface,
	Router(config-if)#
			this command would be interface atm 0.
Step 8
	crypto ipsec client ezvpn name [outside	Assigns the Cisco Easy VPN remote configuration
	inside]	to the WAN interface, causing the router to
	Example:	automatically create the NAT or port address
		translation (PAT) and access list configuration
	Router(config-if)# crypto ipsec client	needed for the VPN connection.
	ezvpn ezvpnclient outside
	Router(config-if)#
Step 9
	exit	Returns to global configuration mode.
	Example:
	Router(config-crypto-ezvpn)# exit
	Router(config)#

Configuration Example

The following configuration example shows a portion of the configuration file for the VPN and IPSec tunnel described in this chapter:

!

aaanew-model

!

aaa authentication login rtr-remote local aaa authorization network rtr-remote local aaa session-id common

!

username Cisco password 0 Cisco

	Cisco 819 Series Integrated Services Routers Software Configuration Guide
9-16	OL-23590-02