Configuring Vpn At Interface Mode And Setting Up Rip - Enterasys X-Pedition XSR-3150 Getting Started Manual

VPN Site-to-Site Sample Configuration
XSR(config)#crypto map acme 91
XSR(config-crypto-m)#set transform-set esp-3des-sha
XSR(config-crypto-m)#match address 191
XSR(config-crypto-m)#set peer 112.16.244.7
XSR(config)#crypto map acme 90
XSR(config-crypto-m)#set transform-set esp-3des-sha
XSR(config-crypto-m)#match address 190
XSR(config-crypto-m)#set peer 112.16.244.9

Configuring VPN at Interface Mode and Setting Up RIP

The following commands configure the LAN physical ports as follows: GigabitEthernet port 1 is
designated Internal LAN, with the specified IP address/subnet as the designated network.
GigabitEthernet port 2 is named VPN Cloud, assigned crypto map acme with associated ACLs, and
directed not to transmit or receive RIP updates. Also, RIP routing and four IP routes are
configured as well as a VPN interface for AAA service.
XSR(config)#interface gigabitethernet 1
XSR(config-if<F1>)#description "Internal LAN"
XSR(config-if<F1>)#no shutdown
XSR(config-if<F1>)#ip address 112.16.1.221/24
XSR(config)#interface gigabitethernet 2
XSR(config-if<F2>)#crypto map acme
XSR(config-if<F2>)#description "VPN Cloud"
XSR(config-if<F2>)#no shutdown
XSR(config-if<F2>)#ip access-group 101 in
XSR(config-if<F2>)#ip access-group 101 out
XSR(config-if<F2>)#ip address 112.16.244.10/24
XSR(config)#interface vpn 57 multi-point
XSR(config-int-vpn)#ip address 192.168.2.1 255.255.255.0
XSR(config)#router rip
XSR(config-router)#network 112.16.10.0
XSR(config-router)#passive-interface gigabitethernet 2
XSR(config-router)#no receive-interface gigabitethernet 2
XSR(config-router)#distribute-list 1 out vpn 1
XSR(config)#ip route 0.0.0.0 0.0.0.0 112.16.244.9
XSR(config)#ip route 112.16.72.0/24 112.16.244.9
XSR(config)#ip route 112.16.76.0/24 112.16.244.7
XSR(config)#ip route 112.16.80.0/24 112.16.244.5
XSR Getting Started Guide 3-29