Cisco Systems C819GUK9 Verifying Your Easy VPN Configuration, 13-12, Configuration Example, Step

Chapter 13 Configuring a VPN Using Easy VPN and an IPSec Tunnel

Configuration Example

	Command or Action	Purpose
Step 7	crypto ipsec client ezvpn name [outside	Assigns the Cisco Easy VPN remote configuration
	inside]	to the WAN interface, causing the router to
	Example:	automatically create the NAT or port address
		translation (PAT) and access list configuration
	Router(config-if)# crypto ipsec client	needed for the VPN connection.
	ezvpn ezvpnclient outside
	Router(config-if)#
Step 8
	exit	Returns to global configuration mode.
	Example:
	Router(config-crypto-ezvpn)# exit
	Router(config)#

Verifying Your Easy VPN Configuration

The following example verifies your easy vpn connection:

Router# show crypto ipsec client ezvpn

Tunnel name :ezvpnclient

Inside interface list:vlan 1

Outside interface:fastethernet 4

Current State:IPSEC_ACTIVE

Last Event:SOCKET_UP

Address:8.0.0.5

Mask:255.255.255.255

Default Domain:cisco.com

Configuration Example

The following configuration example shows a portion of the configuration file for the VPN and IPSec tunnel described in this chapter:

!

aaanew-model

!

aaa authentication login rtr-remote local aaa authorization network rtr-remote local aaa session-id common

!

username Cisco password 0 Cisco

!

crypto isakmp policy 1 encryption 3des authentication pre-share group 2

lifetime 480

!

crypto isakmp client configuration group rtr-remote key secret-password

dns 10.50.10.1 10.60.10.1 domain company.com

pool dynpool

	Cisco 819 Integrated Services Routers Software Configuration Guide
13-12	OL-23590-02