Crypto Map Wizard: Traffic To Protect - Cisco OL-4015-08 User Manual

Chapter 8 Site-to-Site VPN
What Do You Want to Do?
If you want to:
Use the selected transform set for the
crypto map.
Use another existing transform set.
Use a new transform set.
Edit the selected transform set.
Add more transform sets to this crypto
map. You may wish to do this to ensure
that the router can offer a transform set
that the peer will agree to use.

Crypto Map Wizard: Traffic to Protect

Protect all traffic between the following subnets
OL-4015-08
Do this:
Click Next.
Select it in the Select Transform Set list, and click Next.
Click Add, and create the transform set in the Add Transform
Set window. Then, return to this window, and click Next.
Click Edit, and edit the transform set in the Edit Transform
Set window.
Leave the crypto map wizard, uncheck Use Add Wizard, and
click Add Crypto Map. The Transform Set tab allows you to
add and order transform sets.
This window lets you define which traffic is encrypted. You can specify that all
traffic to the remote device be encrypted; you can specify that traffic between
specified subnets be encrypted; you can specify an IPSec rule that can define
multiple source and destination subnets and the types of traffic to be encrypted.
Use this option to specify a single source subnet (a subnet on the LAN) whose
traffic you want to encrypt, and one destination subnet supported by the peer that
you specified in the Peers window. All traffic flowing between other source and
destination subnets will be sent unencrypted.
Source
Enter the address of the subnet whose outgoing traffic you want to protect, and
specify the subnet mask. You can either select a subnet mask from the list or type
in a custom mask. The subnet number and mask must be entered in dotted decimal
format. For more information, see
Cisco Router and Security Device Manager Version 2.2 User's Guide
IP Addresses and Subnet
Edit Site-to-Site VPN
Masks.
8-63