Step-By-Step Configuration Of Cisco Ios Gateway B - NETGEAR FVS318 - ProSafe VPN Firewall Router Reference Manual

Step-By-Step Configuration of Cisco IOS Gateway B

The following are the Cisco commands most relevant to building an inter-vendor VPN. Please
refer to your Cisco documentation or
Log in to the Cisco router.
1.
Type enable, to enter enable mode. Enter your password.
2.
Type config t to enter the configuration mode at the command prompt.
3.
Create an extended access list. Type access-list 110 permit ip 172.23.9.0 0.0.0.255 10.5.6.0
4.
0.0.0.255 at the command prompt. This specifies the protected ip traffic passing through the
router. The first address is Gateway B in the above example and the second is Gateway A.
Define your IKE parameters. Type crypto isakmp policy 1 at the command prompt.
5.
In the ISAKMP submenu type the following commands:
6.
encryption 3des
a.
authentication pre-share
b.
group 5
c.
lifetime 28800
d.
Define the pre-shared key by typing crypto isakmp key hr5xb8416aa9r6 address
7.
14.15.16.17. The address used is the WAN address of Gateway A in the example at the
beginning of this tech note.
Create a transform set by typing crypto ipsec transform-set netgear esp-3des
8.
esp-sha-hmac.
Create an IPSec policy by typing crypto map netgearmap 10 ipsec-isakmp at the command
9.
prompt. Type the following commands in to the IPSec policy submenu:
description vpn tunnel to netgear firewall router
a.
set peer 14.15.16.17
b.
set transform-set netgear
c.
set pfs group5
d.
match address 110
e.
To apply the crypto map to the public interface type crypto map netgearmap.
10.
Exit interface command mode by typing exit.
11.
Exit configuration mode by typing exit.
12.
Reboot Cisco router.
13.
NETGEAR VPN Configuration FVS318 or FVM318 to Cisco IOS
Reference Manual for the Model FVS318 Broadband ProSafe VPN Firewall
www.cisco.com for additional information.
M-10146-01
F-5