Cisco CISCO876-SEC-I-K9 Configuration Guide - Page 71

Con Group Policy Information

Get Cisco CISCO876-SEC-I-K9 - 876 Security Bundle Router PDF manuals and user guides
UPC - 882658021800
View all Cisco CISCO876-SEC-I-K9 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 71 highlights

Chapter 6 Configuring a VPN Using Easy VPN and an IPSec Tunnel Configure Group Policy Information Configure Group Policy Information Perform these steps to configure the group policy, beginning in global configuration mode: Step 1 Command or Action crypto isakmp client configuration group {group-name | default} Example: Router(config)# crypto isakmp client configuration group rtr-remote Router(config-isakmp-group)# Purpose Creates an IKE policy group containing attributes to be downloaded to the remote client. Also enters the Internet Security Association Key and Management Protocol (ISAKMP) group policy configuration mode. Step 2 key name Example: Router(config-isakmp-group)# key secret-password Router(config-isakmp-group)# Specifies the IKE pre-shared key for the group policy. Step 3 Step 4 dns primary-server Example: Router(config-isakmp-group)# dns 10.50.10.1 Router(config-isakmp-group)# Specifies the primary Domain Name System (DNS) server for the group. Note You may also want to specify Windows Internet Naming Service (WINS) servers for the group by using the wins command. domain name Specifies group domain membership. Example: Router(config-isakmp-group)# domain company.com Router(config-isakmp-group)# Step 5 exit Example: Router(config-isakmp-group)# exit Router(config)# Exits IKE group policy configuration mode, and enters global configuration mode. Step 6 ip local pool {default | poolname} [low-ip-address [high-ip-address]] Example: Router(config)# ip local pool dynpool 30.30.30.20 30.30.30.30 Router(config)# Specifies a local address pool for the group. For details about this command and additional parameters that can be set, see the Cisco IOS Dial Technologies Command Reference. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 6-5

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
6-5
Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide
OL-5332-01
Chapter 6
Configuring a VPN Using Easy VPN and an IPSec Tunnel
Configure Group Policy Information
Configure Group Policy Information
Perform these steps to configure the group policy, beginning in global configuration mode:
Command or Action
Purpose
Step 1
crypto isakmp client configuration group
{
group-name
|
default
}
Example:
Router(config)#
crypto isakmp client
configuration group rtr-remote
Router(config-isakmp-group)#
Creates an IKE policy group containing attributes
to be downloaded to the remote client.
Also enters the Internet Security Association Key
and Management Protocol (ISAKMP) group
policy configuration mode.
Step 2
key
name
Example:
Router(config-isakmp-group)#
key
secret-password
Router(config-isakmp-group)#
Specifies the IKE pre-shared key for the group
policy.
Step 3
dns
primary-server
Example:
Router(config-isakmp-group)#
dns 10.50.10.1
Router(config-isakmp-group)#
Specifies the primary Domain Name System
(DNS) server for the group.
Note
You may also want to specify Windows
Internet Naming Service (WINS) servers
for the group by using the
wins
command.
Step 4
domain
name
Example:
Router(config-isakmp-group)#
domain
company.com
Router(config-isakmp-group)#
Specifies group domain membership.
Step 5
exit
Example:
Router(config-isakmp-group)#
exit
Router(config)#
Exits IKE group policy configuration mode, and
enters global configuration mode.
Step 6
ip local pool
{
default
|
poolname
}
[
low-ip-address
[
high-ip-address
]]
Example:
Router(config)#
ip local pool dynpool
30.30.30.20 30.30.30.30
Router(config)#
Specifies a local address pool for the group.
For details about this command and additional
parameters that can be set, see the
Cisco IOS Dial
Technologies Command Reference
.