Cisco 520 Series, Software Configuration Manual

Page: 68 / 162

6-4
Cisco Secure Router 520 Series Software Configuration Guide
OL-14210-01
Chapter 6 Configuring a VPN Using Easy VPN and an IPsec Tunnel
Configure Group Policy Information
Configure Group Policy Information
Perform these steps to configure the group policy, beginning in global configuration mode:
Step 5
group { 1 | 2 | 5 }
Example:
Router(config-isakmp)# group 2
Router(config-isakmp)#
Specifies the Diffie-Hellman group to be used in
an IKE policy.
Step 6 lifetime seconds
Example:
Router(config-isakmp)# lifetime 480
Router(config-isakmp)#
Specifies the lifetime, 60–86400 seconds, for an
IKE security association (SA).
Step 7
exit
Example:
Router(config-isakmp)# exit
Router(config)#
Exits IKE policy configuration mode, and enters
global configuration mode.
Command or Action Purpose
Command or Action Purpose
Step 1 crypto isakmp client configuration group
{ group-name | default }
Example:
Router(config)# crypto isakmp client
configuration group rtr-remote
Router(config-isakmp-group)#
Creates an IKE policy group containing attributes
to be downloaded to the remote client.
Also enters the Internet Security Association Key
and Management Protocol (ISAKMP) group
policy configuration mode.
Step 2
key name
Example:
Router(config-isakmp-group)# key
secret-password
Router(config-isakmp-group)#
Specifies the IKE pre-shared key for the group
policy.
Step 3
dns primary-server
Example:
Router(config-isakmp-group)# dns 10.50.10.1
Router(config-isakmp-group)#
Specifies the primary Domain Name System
(DNS) server for the group.
Note
You may also want to specify Windows
Internet Naming Service (WINS) servers
for the group by using the
wins command.