Cisco Systems OL-6426-02 manual Create an Easy VPN Remote Configuration, Crypto map map-name

Models: OL-6426-02

1 196
Download 196 pages 47.1 Kb
Page 81
Image 81

Chapter 6 Configuring a VPN Using Easy VPN and an IPSec Tunnel

Create an Easy VPN Remote Configuration

BETA DRAFT - CISCO CONFIDENTIAL

 

Command or Action

Purpose

Step 2

 

 

crypto map map-name

Applies the crypto map to the interface.

 

Example:

See the Cisco IOS Security Command Reference

 

for more detail about this command.

 

 

 

Router(config-if)#crypto map static-map

 

 

Router(config-if)#

 

Step 3

 

 

exit

Returns to global configuration mode.

 

Example:

 

 

Router(config-crypto-map)# exit

 

 

Router(config)#

 

 

 

 

Create an Easy VPN Remote Configuration

The router acting as the IPSec remote router must create an Easy VPN remote configuration and assign it to the outgoing interface.

Perform these steps to create the remote configuration, beginning in global configuration mode:

 

Command or Action

Purpose

Step 1

 

 

crypto ipsec client ezvpn name

Creates a Cisco Easy VPN remote configuration,

 

 

and enters Cisco Easy VPN remote configuration

 

Example:

mode.

 

Router(config)# crypto ipsec client ezvpn

 

 

ezvpnclient

 

 

Router(config-crypto-ezvpn)#

 

Step 2

 

 

group group-name key group-key

Specifies the IPSec group and IPSec key value for

 

 

the VPN connection.

 

Example:

 

 

Router(config-crypto-ezvpn)# group

 

 

ezvpnclient key secret-password

 

 

Router(config-crypto-ezvpn)#

 

Step 3

 

 

peer {ipaddress hostname}

Specifies the peer IP address or hostname for the

 

 

VPN connection.

 

Example:

Note A hostname can be specified only when

 

 

 

Router(config-crypto-ezvpn)# peer

the router has a DNS server available for

 

192.168.100.1

hostname resolution.

 

Router(config-crypto-ezvpn)#

 

 

Step 4

 

 

mode {client network-extension network

Specifies the VPN mode of operation.

 

extension plus}

 

 

Example:

 

 

Router(config-crypto-ezvpn)# mode client

 

 

Router(config-crypto-ezvpn)#

 

 

 

 

Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide

 

OL-6426-02

6-9

 

 

 

Page 81
Image 81
Cisco Systems OL-6426-02 manual Create an Easy VPN Remote Configuration, Crypto map map-name