Cisco Systems OL-6426-02 Configure a GRE Tunnel, Apply the Crypto Map to the Physical Interface

Models: OL-6426-02

1 196
Download 196 pages 47.1 Kb
Page 92
Image 92

Chapter 7 Configuring VPNs Using an IPSec Tunnel and Generic Routing Encapsulation

Configure a GRE Tunnel

BETA DRAFT - CISCO CONFIDENTIAL

Apply the Crypto Map to the Physical Interface

The crypto maps must be applied to each interface through which IPSec traffic flows. Applying the crypto map to the physical interface instructs the router to evaluate all the traffic against the security associations database. With the default configurations, the router provides secure connectivity by encrypting the traffic sent between remote sites. However, the public interface still allows the rest of the traffic to pass and provides connectivity to the Internet.

Perform these steps to apply a crypto map to an interface, beginning in global configuration mode:

 

Command or Action

Purpose

Step 1

 

 

interface type number

Enters interface configuration mode for the

 

 

interface to which you want to apply the crypto

 

Example:

map.

 

Router(config)# interface fastethernet 0

 

 

Router(config-if)#

 

Step 2

 

 

crypto map map-name

Applies the crypto map to the interface.

 

Example:

See th e Cisco IOS Security Command Reference

 

for more detail about this command.

 

 

 

Router(config-if)#crypto map static-map

 

 

Router(config-if)#

 

Step 3

 

 

exit

Enters global configuration mode.

 

Example:

 

 

Router(config-if)# exit

 

 

Router(config)#

 

 

 

 

Configure a GRE Tunnel

Perform these steps to configure a GRE tunnel, beginning in global configuration mode:

 

Command or Action

Purpose

Step 1

 

 

interface type number

Creates a tunnel interface and enters interface

 

 

configuration mode.

 

Example:

 

 

Router(config)# interface tunnel 1

 

 

Router(config-if)#

 

Step 2

 

 

ip address ip-address mask

Assigns an address to the tunnel.

 

Example:

 

 

Router(config-if)# 10.62.1.193

 

 

255.255.255.252

 

 

Router(config-if)#

 

 

 

 

Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide

7-8

OL-6426-02

 

 

Page 92
Image 92
Cisco Systems OL-6426-02 manual Configure a GRE Tunnel, Apply the Crypto Map to the Physical Interface