Crypto map –
crypto map
●
- description
- set transform-set
- set peer OR set peer-group
- set dscp
- continuous-channel
IP crypto-list –
ip crypto-list
●
- local-address
- ip-rule
description
●
source-ip
●
destination-ip
●
protect crypto map
●
ip-protocol
●
tcp
●
udp
●
icmp
●
dscp
●
fragment
●
Access control list –
●
global parameters
●
- crypto isakmp invalid-spi-recovery
- crypto ipsec nat-transparency udp-encapsulation
- crypto isakmp nat keepalive
assigning a crypto-list to an interface
●
- crypto ipsec df-bit
- crypto ipsec minimal-pmtu
- ip crypto-group
ip access-control-list
Issue 3 February 2007
453