Table of Contents
Advertisement
application
ipsec transport profile
host1(config-ipsec-transport-profile)#transform-set esp-3des-hmac-sha
esp-3des-hmac-md5
To display the available transform sets, issue the transform-set ? command.
Specify the local endpoint (for L2TP, the LNS address) of the IPSec transport
connection, and enter Local IPSec Transport Profile mode.
host1(config-ipsec-transport-profile)#local ip address 10.10.1.1
host1(config-ipsec-transport-profile-local)#
(Optional) Configure a key for IKE negotiations. For example:
Enter the unencrypted key. The router encrypts the key and stores it in encrypted
form. You can no longer retrieve the unencrypted key.
host1(config-ipsec-transport-profile-local)#pre-share secretforGre
Use to specify the types of application secured by connections created with this
IPSec transport profile. You can specify multiple applications on the same
command line:
dvmrp Secures DVMRP tunnel traffic
gre Secures GRE tunnel traffic
l2tp Secures L2TP traffic
l2tp-nat-passthrough—Secures L2TP traffic and also allows clients to connect
from behind NAT devices that support IPSec passthrough. To allow these
clients to connect, the router:
Does not generate or verify UDP checksums. This does not compromise
security, because IPSec protects UDP packets with an authentication
algorithm far stronger than UDP checksums.
Provides IPSec filtering based on the received IP address (the NAT public
IP address), rather than filtering based on the negotiated IKE identities.
Example
host1(config-ipsec-transport-profile)#application gre dvmrp l2tp
Use the no version to return to the default application type, L2TP.
See application.
Use to create an IPSec transport profile and to enter IPSec Transport Profile
Configuration mode. To create a new profile, you must include the following
keywords:
virtual-router—Name of the virtual router on which you want to create the
profile
ip address Remote endpoint for the IPSec transport connection.
Chapter 12: Securing L2TP and IP Tunnels with IPSec
Configuring IPSec Transport Profiles
303
Advertisement
Table of Contents
