Add Or Edit Crypto Map: Ipsec Rules Panel - Cisco OL-4015-08 User Manual

IPSec Policies
If you want to:
Change the preference order of the
selected transform sets.
Add a transform set to the Available
Transform Sets list.
Edit a transform set in the Available
Transform Sets list.

Add or Edit Crypto Map: IPSec Rules Panel

Note
To add or change the IPSec rule for this crypto map:
Step 1
Step 2
Note
Step 3
Step 4
Cisco Router and Security Device Manager Version 2.2 User's Guide
13-34
Do this:
Select a transform set, and click the up button or the down
button.
Click Add, and configure the transform set in the Add
Transform Set window.
Click Edit, and configure the transform set in the Edit
Transform Set window.
Use this screen to add or change the IPSec rule used in this crypto map. IPSec
rules contain access rule entries that determine the traffic to be encrypted. The
IPSec rule field shows the name of the IPSec rule in use.
If you are adding an IPSec rule for a VPN connection that uses a tunnel interface,
the rule must specify the same source and destination data as the tunnel
configuration.
Click the button to the right of the IPSec Rule field.
Click Select an existing rule (ACL) if the rule you want to use has already been
created, select the rule, and click OK.
IPSec rules must be extended rules, not standard rules. If the number or name you
enter identifies a standard rule, SDM will display a warning message when you
click OK.
Click Create a new rule and select if the rule you need has not been created.
Create the rule, and click OK.
Click OK if you want to close the crypto map window, or click another tab if you
want to work in another panel.
Chapter 13 IP Security
OL-4015-08