Chapter8 Site-to-Site VPN
How Do I...
8-74
Cisco Router and Security Device Manager Version 2.2 User’s Guide
OL-4015-08
Step1 From the left frame, select VPN.
Step2 From the VPN tree, select VPN Components, and then IPSec Policies.
Step3 In the IPSec Policies table, click the IPSec policy that contains the crypto map to
which you want to add another transform set.
Step4 Click Edit.
The Edit IPSec Policy dialog box appears.
Step5 In the “Crypto Maps in this IPSec Policy” table, click the crypto map to which
you want to add another transform set.
Step6 Click Edit.
The Edit Crypt Map dialog box appears.
Step7 Click the Transform Sets tab.
Step8 In the Available Transform Sets field, click a transform set that you want to add
to the crypto map.
Step9 Click >> to add the selected transform set to the crypto map.
Step10 If you want to add additional transform sets to this crypto map, repeat Step9 and
Step 10 until you have added all the transform sets you want.
Click OK.
How Do I Configure a VPN on an Unsupported Interface?
SDM can configure a VPN over an interface type unsupported by SDM. Before
you can configure the VPN connection, you must first use the router CLI to
configure the interface. The interface must have, at a minimum, an IP address
configured, and it must be working. To verify that the connection is working,
verify that the interface status is “Up.”
After you have configured the unsupported interface using the CLI, yo u can use
SDM to configure your VPN connection. The unsupported int erface will appear
in the fields that require you to choose an interface for the VPN connection.