Cisco 520 Series, Software Configuration Manual

Page: 69 / 162

6-5
Cisco Secure Router 520 Series Software Configuration Guide
OL-14210-01
Chapter 6 Configuring a VPN Using Easy VPN and an IPsec Tunnel
Apply Mode Configuration to the Crypto Map
Apply Mode Configuration to the Crypto Map
Perform these steps to apply mode configuration to the crypto map, beginning in global configuration
mode:
Step 4
domain name
Example:
Router(config-isakmp-group)# domain
company.com
Router(config-isakmp-group)#
Specifies group domain membership.
Step 5 exit
Example:
Router(config-isakmp-group)# exit
Router(config)#
Exits IKE group policy configuration mode, and
enters global configuration mode.
Step 6 ip local pool { default | poolname }
[ low-ip-address [ high-ip-address ]]
Example:
Router(config)# ip local pool dynpool
30.30.30.20 30.30.30.30
Router(config)#
Specifies a local address pool for the group.
For details about this command and additional
parameters that can be set, see the
Cisco IOS Dial
Technologies Command Reference .
Command or Action Purpose
Command or Action Purpose
Step 1 crypto map map-name isakmp authorization list
list-name
Example:
Router(config)# crypto map dynmap isakmp
authorization list rtr-remote
Router(config)#
Applies mode configuration to the crypto map and
enables key lookup (IKE queries) for the group
policy from an authentication, authorization, and
accounting (AAA) server.
Step 2 crypto map tag client configuration address
[ initiate | respond ]
Example:
Router(config)# crypto map dynmap client
configuration address respond
Router(config)#
Configures the router to reply to mode
configuration requests from remote clients.