Table of Contents
Advertisement
Configuration Tasks
Command
Router(config)# crypto map map-name seq-num
ipsec-isakmp dynamic dynamic-map-name
Applying Crypto Map Sets to Interfaces
Apply a crypto map set to each interface through which IPSec traffic will flow. Crypto maps instruct the
router to evaluate the interface traffic against the crypto map set and use the specified policy during
connection or security association negotiation on behalf of traffic to be protected by crypto.
To apply a crypto map set to an interface, use the following command in interface configuration mode:
Command
Router(config-if)# crypto map map-name
To specify redundant interfaces and name an identifying interface, use the following command in global
configuration mode:
Command
Router(config)# crypto map map-name
local-address interface-id
Configuring Compression
This section includes the following topics:
•
•
•
•
•
•
For IPSec configuration examples, refer to the
See the "Configuring IPSec Network Security" of the Cisco IOS Security Configuration Guide for more
information on configuring IPSec.
Configure IKE Policy
To configure IKE policy, follow the steps in
in global configuration mode.
VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide
4-14
Configure IKE Policy
(required)
Configure IKE Preshared Key
Configure ipsec transform set
Configure access-list
(required)
Configure crypto map
(required)
Apply crypto map to the Interface
Purpose
Adds a dynamic crypto map set to a static crypto
map set.
Purpose
Applies a crypto map set to an interface.
Purpose
Permits redundant interfaces to share the same
crypto map, using the same local identity.
(required)
(required)
(required)
"Configuring Compression
"Configuring an IKE Policy" on page 3,
Chapter 4
Configuring the SA-VAM2+
Example".
using the commands
OL-5979-03
Advertisement
Table of Contents
