143
Cisco 3900 Series, Cisco 2900 Series, and Cisco 1900 Series Integrated Services Routers Generation 2 Software Configuration Guide
Chapter Configuring Security Features
Configuring VPN
Where to Go Next
If you are creating a Cisco Easy VPN remote configuration, go to the
“Create a Cisco Easy VPN Remote
Configuration” section on page 143
If you are creating a site-to-site VPN using IPSec tunnels and GRE, go to the
GRE Tunnel” section on page 146
Create a Cisco Easy VPN Remote Configuration
The router that is acting as the Cisco Easy VPN client must create a Cisco Easy VPN remote
configuration and assign it to the outgoing interface.
To
create the remote configuration
,
follow these steps
,
beginning in global configuration mode
.
SUMMARY STEPS
1.
crypto ipsec client ezvpn
name
2.
group
group-name
key
group-key
3.
peer
{
ipaddress
|
hostname
}
4.
mode {client | network-extension | network extension plus}
5.
exit
6.
crypto isakmp keepalive
seconds
7.
interface
type number
8.
crypto ipsec client ezvpn
name
[outside | inside]
9.
exit
Step 2
crypto map
map-name
Example:
Router(config-if)# crypto map static-map
Router(config-if)#
Applies the crypto map to the interface.
See
Cisco IOS Security Command Reference
for
more detail about this command.
Step 3
exit
Example:
Router(config-crypto-map)# exit
Router(config)#
Returns to global configuration mode.
Command or Action
Purpose
