Cisco Systems C819GUK9 Router User Manual


 
13-10
Cisco 819 Integrated Services Routers Software Configuration Guide
OL-23590-02
Chapter 13 Configuring a VPN Using Easy VPN and an IPSec Tunnel
Configuration Tasks
Apply the Crypto Map to the Physical Interface
The crypto maps must be applied to each interface through which IP Security (IPSec) traffic flows.
Applying the crypto map to the physical interface instructs the router to evaluate all the traffic against
the security associations database. With the default configurations, the router provides secure
connectivity by encrypting the traffic sent between remote sites. However, the public interface still
allows the rest of the traffic to pass and provides connectivity to the Internet.
Perform these steps to apply a crypto map to an interface, beginning in global configuration mode:
SUMMARY STEPS
1. interface type number
2. crypto map map-name
3. exit
DETAILED STEPS
Create an Easy VPN Remote Configuration
The router acting as the IPSec remote router must create an Easy VPN remote configuration and assign
it to the outgoing interface.
Perform these steps to create the remote configuration, beginning in global configuration mode:
SUMMARY STEPS
1. crypto ipsec client ezvpn name
2. group group-name key group-key
3. peer {ipaddress | hostname}
Command or Action Purpose
Step 1
interface type number
Example:
Router(config)# interface fastethernet 4
Router(config-if)#
Enters the interface configuration mode for the
interface to which you want the crypto map
applied.
Step 2
crypto map map-name
Example:
Router(config-if)# crypto map static-map
Router(config-if)#
Applies the crypto map to the interface.
See Cisco IOS Security Command Reference for
more details about this command.
Step 3
exit
Example:
Router(config-crypto-map)# exit
Router(config)#
Returns to global configuration mode.