Cisco Systems OL-6426-02 manual Enable Policy Lookup, Specifies group domain membership

Chapter 7 Configuring VPNs Using an IPSec Tunnel and Generic Routing Encapsulation

Configure a VPN

BETA DRAFT - CISCO CONFIDENTIAL

	Command or Action		Purpose
Step 4
	domain name		Specifies group domain membership.
	Example:
	Router(config-isakmp-group)# domain
	company.com
	Router(config-isakmp-group)#
Step 5
	exit		Exits IKE group policy configuration mode, and
			enters global configuration mode.
	Example:
	Router(config-isakmp-group)# exit
	Router(config)#
Step 6
	ip local pool {default poolname}		Specifies a local address pool for the group.
	[low-ip-address [high-ip-address]]		For details about this command and additional
	Example:		parameters that can be set, see the Cisco IOS Dial
			Technologies Command Reference.
	Router(config)# ip local pool dynpool
	30.30.30.20	30.30.30.30
	Router(config)#

Enable Policy Lookup

Perform these steps to enable policy lookup through AAA, beginning in global configuration mode:

	Command or Action	Purpose
Step 1
	aaa new-model	Enables the AAA access control model.
	Example:
	Router(config)# aaa new-model
	Router(config)#
Step 2
	aaa authentication login {default list-name}	Specifies AAA authentication of selected users at
	method1 [method2...]	login, and specifies the method used.
	Example:	This example uses a local authentication database.
		You could also use a RADIUS server for this. See
	Router(config)# aaa authentication login	the Cisco IOS Security Configuration Guide and
	rtr-remote local	the Cisco IOS Security Command Reference for
	Router(config)#
		details.

Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide

OL-6426-02 7-5