Table of Contents
Advertisement
Chapter 4
Configuring the SA-VAM2+
Configure IKE Preshared Key
To specify preshared keys at a peer, use the following commands in global configuration mode:
Command
Step 1
Router (config)# crypto isakmp key keystring address
peer-address
or
Router (config)# crypto isakmp key keystring
hostname peer-hostname
Step 2
Router (config)# crypto isakmp key_keystring address
peer-address
or
Router (config)# crypto isakmp key_keystring
hostname peer-hostname
Step 3
Repeat the previous two steps for each remote peer.
Remember to repeat these tasks at each peer that uses preshared in an IKE policy.
Configure ipsec transform set
To define a transform set—an acceptable combination of security protocols and algorithms—use the
crypto ipsec transform-set global configuration command. To delete a transform set, use the no form of
the command.
Command
Router (config)# crypto ipsec transform-set
transform-set-name transform1 [transform2
[transform3]]
Configure access-list
To establish MAC address access lists, use the access-list global configuration command. To remove a
single access list entry, use the no form of this command.
OL-5979-03
Purpose
At the local peer:
Specify the shared key to be used with a particular
remote peer.
If the remote peer specified their ISAKMP identity
with an address, use the address keyword in this step;
otherwise use the hostname keyword in this step.
At the remote peer:
Specify the shared key to be used with the local peer.
This is the same key you just specified at the local
peer.
If the local peer specified their ISAKMP identity
with an address, use the address keyword in this step;
otherwise use the hostname keyword in this step.
Purpose
transform-set-name
Specify the name of the transform set to create (or
modify).
transform1
transform2
transform3
Specify up to three transforms (one is required) that
define the IPSec security protocol(s) and
algorithm(s).
VPN Acceleration Module 2+ (VAM2+) Installation and Configuration Guide
Configuration Tasks
4-15
Advertisement
Table of Contents
