Apply The Crypto Map To The Physical Interface - Cisco 1941W Configuration Manual

Configuring VPN
Command or Action
Step 4
exit
Example:
Router(config-crypto-map)# exit
Router(config)#
Step 5 crypto map map-name seq-num [ipsec-isakmp]
[dynamic dynamic-map-name] [discover]
[profile profile-name]
Example:
Router(config)# crypto map static-map 1
ipsec-isakmp dynamic dynmap
Router(config)#

Apply the Crypto Map to the Physical Interface

The crypto maps must be applied to each interface through which IPSec traffic flows. Applying the
crypto map to the physical interface instructs the router to evaluate all the traffic against the security
associations database. With the default configurations, the router provides secure connectivity by
encrypting the traffic sent between remote sites. However, the public interface still allows the rest of the
traffic to pass and provides connectivity to the Internet.
To apply a crypto map to an interface, follow these steps, beginning in global configuration mode.
SUMMARY STEPS
1.
2.
3.
DETAILED STEPS
Command or Action
Step 1 interface type number
Example:
Router(config)# interface fastethernet 4
Router(config-if)#
Cisco 3900 Series, Cisco 2900 Series, and Cisco 1900 Series Integrated Services Routers Generation 2 Software Configuration Guide
142
interface type number
crypto map map-name
exit
Chapter Configuring Security Features
Purpose
Returns to global configuration mode.
Creates a crypto map profile.
Purpose
Enters the interface configuration mode for the
interface to which you are applying the crypto
map.