Cisco CISCO876-SEC-I-K9 Configuration Guide - Page 79

Configuring VPNs Using an IPSec Tunnel and, Generic Routing Encapsulation

Get Cisco CISCO876-SEC-I-K9 - 876 Security Bundle Router PDF manuals and user guides
UPC - 882658021800
View all Cisco CISCO876-SEC-I-K9 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 79 highlights

CH A P T E R 7 Configuring VPNs Using an IPSec Tunnel and Generic Routing Encapsulation OL-5332-01 The Cisco 850 and Cisco 870 series routers support the creation of virtual private networks (VPNs). Cisco routers and other broadband devices provide high-performance connections to the Internet, but many applications also require the security of VPN connections which perform a high level of authentication and which encrypt the data between two particular endpoints. Two types of VPNs are supported-site-to-site and remote access. Site-to-site VPNs are used to connect branch offices to corporate offices, for example. Remote access VPNs are used by remote clients to log in to a corporate network. The example in this chapter illustrates the configuration of a site-to-site VPN that uses IPSec and the generic routing encapsulation (GRE) protocol to secure the connection between the branch office and the corporate network. Figure 7-1 shows a typical deployment scenario. Figure 7-1 Site-to-Site VPN Using an IPSec Tunnel and GRE 8 3 6 2 4 5 7 Internet 1 9 121783 1 Branch office containing multiple LANs and VLANs 2 Fast Ethernet LAN interface-With address 192.168.0.0/16 (also the inside interface for NAT) 3 VPN client-Cisco 850 or Cisco 870 series access router 4 Fast Ethernet or ATM interface-With address 200.1.1.1 (also the outside interface for NAT) 5 LAN interface-Connects to the Internet; with outside interface address of 210.110.101.1 6 VPN client-Another router, which controls access to the corporate network 7 LAN interface-Connects to the corporate network, with inside interface address of 10.1.1.1 8 Corporate office network 9 IPSec tunnel with GRE Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 7-1

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
CHAPTER
7-1
Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide
OL-5332-01
7
Configuring VPNs Using an IPSec Tunnel and
Generic Routing Encapsulation
The Cisco 850 and Cisco 870 series routers support the creation of virtual private networks (VPNs).
Cisco routers and other broadband devices provide high-performance connections to the Internet, but
many applications also require the security of VPN connections which perform a high level of
authentication and which encrypt the data between two particular endpoints.
Two types of VPNs are supported—site-to-site and remote access. Site-to-site VPNs are used to connect
branch offices to corporate offices, for example. Remote access VPNs are used by remote clients to log
in to a corporate network.
The example in this chapter illustrates the configuration of a site-to-site VPN that uses IPSec and the
generic routing encapsulation (GRE) protocol to secure the connection between the branch office and
the corporate network.
Figure 7-1
shows a typical deployment scenario.
Figure 7-1
Site-to-Site VPN Using an IPSec Tunnel and GRE
121783
Internet
3
1
2
4
5
7
6
8
9
1
Branch office containing multiple LANs and VLANs
2
Fast Ethernet LAN interface—With address 192.168.0.0/16 (also the inside interface for NAT)
3
VPN client—Cisco 850 or Cisco 870 series access router
4
Fast Ethernet or ATM interface—With address 200.1.1.1 (also the outside interface for NAT)
5
LAN interface—Connects to the Internet; with outside interface address of 210.110.101.1
6
VPN client—Another router, which controls access to the corporate network
7
LAN interface—Connects to the corporate network, with inside interface address of 10.1.1.1
8
Corporate office network
9
IPSec tunnel with GRE