Cisco Systems C819GUK9 Router User Manual


 
9-16
Cisco 819 Series Integrated Services Routers Software Configuration Guide
OL-23590-02
Chapter 9 Configuring Security Features
Configuring VPN
Configuration Example
The following configuration example shows a portion of the configuration file for the VPN and IPSec
tunnel described in this chapter:
!
aaa new-model
!
aaa authentication login rtr-remote local
aaa authorization network rtr-remote local
aaa session-id common
!
username Cisco password 0 Cisco
Step 4
mode {client | network-extension | network
extension plus}
Example:
Router(config-crypto-ezvpn)# mode client
Router(config-crypto-ezvpn)#
Specifies the VPN mode of operation.
Step 5
exit
Example:
Router(config-crypto-ezvpn)# exit
Router(config)#
Returns to global configuration mode.
Step 6
crypto isakmp keepalive seconds
Example:
Router(config-crypto-ezvpn)# crypto isakmp
keepalive 10
Router(config)#
Enables dead peer detection messages. Time
between messages is given in seconds, with a
range of 10 to 3600.
Step 7
interface type number
Example:
Router(config)# interface fastethernet 4
Router(config-if)#
Enters the interface configuration mode for the
interface to which you want the Cisco Easy VPN
remote configuration applied.
Note For routers with an ATM WAN interface,
this command would be interface atm 0.
Step 8
crypto ipsec client ezvpn name [outside |
inside]
Example:
Router(config-if)# crypto ipsec client
ezvpn ezvpnclient outside
Router(config-if)#
Assigns the Cisco Easy VPN remote configuration
to the WAN interface, causing the router to
automatically create the NAT or port address
translation (PAT) and access list configuration
needed for the VPN connection.
Step 9
exit
Example:
Router(config-crypto-ezvpn)# exit
Router(config)#
Returns to global configuration mode.
Command or Action Purpose