Cisco SA-VAM - VPN Acceleration Module, Руководство по установке и настройке

Страница: 55 / 69

4-15
VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide
OL-5979-03
Chapter 4 Configuring the SA-VAM2+
Configuration Tasks
Configure IKE Preshared Key
To specify preshared keys at a peer, use the following commands in global configuration mode:
Remember to repeat these tasks at each peer that uses preshared in an IKE policy.
Configure ipsec transform set
To define a transform set—an acceptable combination of security protocols and algorithms—use the
crypto ipsec transform-set global configuration command. To delete a transform set, use the no form of
the command.
Configure access-list
To establish MAC address access lists, use the access-list global configuration command. To remove a
single access list entry, use the no form of this command.
Command Purpose
Step 1
Router (config)# crypto isakmp key keystring address
peer-address
or
Router (config)# crypto isakmp key keystring
hostname peer-hostname
At the local peer:
Specify the shared key to be used with a particular
remote peer.
If the remote peer specified their ISAKMP identity
with an address, use the
address keyword in this step;
otherwise use the hostname keyword in this step.
Step 2
Router (config)# crypto isakmp key _ keystring address
peer-address
or
Router (config)# crypto isakmp key _ keystring
hostname peer-hostname
At the remote peer :
Specify the shared key to be used with the local peer.
This is the same key you just specified at the local
peer.
If the local peer specified their ISAKMP identity
with an address, use the
address keyword in this step;
otherwise use the hostname keyword in this step.
Step 3
Repeat the previous two steps for each remote peer.
Command Purpose
Router (config)# crypto ipsec transform-set
transform-set-name transform1 [transform2
[transform3]]
transform-set-name
Specify the name of the transform set to create (or
modify).
transform1
transform2
transform3
Specify up to three transforms (one is required) that
define the IPSec security protocol(s) and
algorithm(s).