Motorola RFS7000 Reference Manual page 248

5-32 Motorola RF Switch CLI Reference Guide
c. Create and configure ISAKMP policy.
RFSwitch(config)#crypto isakmp policy 199
RFSwitch(config-crypto-isakmp)#encryption aes
RFSwitch(config-crypto-isakmp)#hash sha
RFSwitch(config-crypto-isakmp)#authentication pre-share
RFSwitch(config-crypto-isakmp)#group 5
RFSwitch(config-crypto-isakmp)#lifetime 9496
d. Create and configure an IPSec transform set.
RFSwitch(config)#crypto ipsec transform-set TFSET ah-sha-
hmac esp-aes
RFSwitch(config-crypto-ipsec)#mode tunnel
e. Create and configure a crypto map.
RFSwitch(config)#crypto map THIRDMAP 435 isakmp
RFSwitch(config-crypto-map)#set peer 15.1.1.20
RFSwitch(config-crypto-map)#match address 150
RFSwitch(config-crypto-map)#set transformset TFSET
RFSwitch(config-crypto-map)#set security-association
lifetime seconds 3600
f. Associate the crypto map with a VLAN interface.
RFSwitch(config)#interface vlan1
RFSwitch(config-if)#ip address 11.1.1.10/24
RFSwitch(config-if)#crypto map THIRDMAP
RFSwitch(config-if)#interface vlan2100
RFSwitch(config-if)#ip address 12.1.1.10/24
RFSwitch(config-if)#ip route 0.0.0.0/0 11.1.1.2