#VPN SUR LIFECRAFT HOW TO#
#VPN SUR LIFECRAFT SOFTWARE#

This section includes the following topics: Be sure to use your own IP addresses when configuring your Cisco 7200 series router. Note Throughout this chapter, there are numerous configuration examples and sample configuration outputs that include unusable IP addresses. This chapter includes the following sections:

#VPN SUR LIFECRAFT HOW TO#

For information on how to access the publications, see 'Related Documentation' section on page xi.

#VPN SUR LIFECRAFT SOFTWARE#

For up-to-date Cisco IOS security software features documentation, refer to the Cisco IOS Security Configuration Guide and the Cisco IOS Security Command Reference publications for your Cisco IOS Release. Some Cisco IOS security software features not described in this document can be used to increase performance and scalability of your VPN. This chapter describes basic features and configurations used in a site-to-site VPN scenario. Note In this Guide, the term `Cisco 7200 series router' implies that an Integrated Service Adaptor (ISA) or a VAM (VAM, VAM2, or VAM2+) is installed in the Cisco 7200 series router. Basic security, Network Address Translation (NAT), Encryption, Cisco IOS weighted fair queuing (WFQ), and extended access lists for basic traffic filtering are configured.

This chapter explains the basic tasks for configuring IP-based, site-to-site and extranet Virtual Private Networks (VPNs) on a Cisco 7200 series router using generic routing encapsulation (GRE) and IPSec tunneling protocols. Site-to-Site and Extranet VPN Business Scenarios

Verifying Extended Access Lists Are Applied Correctly.

Creating Extended Access Lists Using Access List Numbers.

Step 5-Configuring Cisco IOS Firewall Features.

Verifying Class-Based Weighted Fair Queuing.

Attaching the Service Policy and Enabling CBWFQ.

Configuring Class Policy in the Policy Map (Tail Drop).

Configuring Class-Based Weighted Fair Queuing.

Configuring Network-Based Application Recognition.

Verifying Crypto Map Interface Associations.

Verifying Transform Sets and IPSec Tunnel Mode.

Defining Transform Sets and Configuring IPSec Tunnel Mode.

Configuring IPSec and IPSec Tunnel Mode.

Configuring the Cisco 7200 Series Router for Digital Certificate Interoperability.

Additional Configuration Required for IKE Policies.

Step 3-Configuring Encryption and IPSec.

Verifying Static Inside Source Address Translation.

Configuring Static Inside Source Address Translation.

Step 2-Configuring Network Address Translation.

Verifying the Tunnel Interface, Source, and Destination.

Configuring the Tunnel Interface, Source, and Destination.

Vpn sur lifecraft