Apply The Crypto Map To The Physical Interface - Cisco CISCO851-K9 - 851 Integrated Services Router Configuration Manual

Chapter 6 Configuring a VPN Using Easy VPN and an IPSec Tunnel
Command or Action
Step 3
reverse-route
Example:
Router(config-crypto-map)# reverse-route
Router(config-crypto-map)#
Step 4
exit
Example:
Router(config-crypto-map)# exit
Router(config)#
Step 5 crypto map map-name seq-num [ipsec-isakmp]
[dynamic dynamic-map-name] [discover]
[profile profile-name]
Example:
Router(config)# crypto map static-map 1
ipsec-isakmp dynamic dynmap
Router(config)#

Apply the Crypto Map to the Physical Interface

The crypto maps must be applied to each interface through which IP Security (IPSec) traffic flows.
Applying the crypto map to the physical interface instructs the router to evaluate all the traffic against
the security associations database. With the default configurations, the router provides secure
connectivity by encrypting the traffic sent between remote sites. However, the public interface still
allows the rest of the traffic to pass and provides connectivity to the Internet.
Perform these steps to apply a crypto map to an interface, beginning in global configuration mode:
Command or Action
Step 1 interface type number
Example:
Router(config)# interface fastethernet 4
Router(config-if)#
OL-5332-01
Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide
Apply the Crypto Map to the Physical Interface
Purpose
Creates source proxy information for the crypto
map entry.
See the Cisco IOS Security Command Reference
for details.
Returns to global configuration mode.
Creates a crypto map profile.
Purpose
Enters the interface configuration mode for the
interface to which you want the crypto map
applied.
6-9