Cisco ubr924 Installation And Startup page 28

Reconfigure the Router (continued)
IPSec Example
Note: Encryption/decryption is subject to export licensing controls. To support IPSec, the Cisco uBR924 must
be configured in routing mode, rather than bridging. Cisco IOS Release 12.0(5)T or higher must be used. Both
the CMTS and the Cisco uBR924 must be enabled and properly configured to support encryption.
26
Current configuration:
!
Last configuration change at 23:24:55 - Thu Mar 18 1999
!
version 12.0
no service pad
service timestamps debug uptime
service timestamps log uptime
!
hostname Router
!
clock timezone - 0 6
ip subnet-zero
no ip domain-lookup
!
crypto isakmp policy 1
hash md5
authentication pre-share
lifetime 5000
crypto isakmp key 1111 address 30.1.1.1
crypto isakmp identity hostname
!
crypto ipsec transform-set test-transform ah-md5-hmac esp-des esp-md5-hmac
!
crypto map test-ipsec local-address cable-modem0
crypto map test-ipsec 10 ipsec-isakmp
set peer 30.1.1.1
set transform-set test-transform
match address 100
!
interface Ethernet0
ip address 24.1.0.1 255.255.0.0
no ip directed-broadcast
!
interface cable-modem0
ip address 10.1.0.25 255.255.0.0
no ip directed-broadcast
no keepalive
cable-modem downstream saved channel 213000000 30
no cable-modem compliant bridge
crypto map test-ipsec