Cisco CISCO876-SEC-I-K9 Configuration Guide - Page 82

crypto isakmp client configuration group, group-name | default}, domain, ip local pool {default

Get Cisco CISCO876-SEC-I-K9 - 876 Security Bundle Router PDF manuals and user guides
UPC - 882658021800
View all Cisco CISCO876-SEC-I-K9 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 82 highlights

Configure a VPN Chapter 7 Configuring VPNs Using an IPSec Tunnel and Generic Routing Encapsulation Configure Group Policy Information Perform these steps to configure the group policy, beginning in global configuration mode: Step 1 Command or Action crypto isakmp client configuration group {group-name | default} Example: Router(config)# crypto isakmp client configuration group rtr-remote Router(config-isakmp-group)# Purpose Creates an IKE policy group that contains attributes to be downloaded to the remote client. Also enters Internet Security Association Key Management Protocol (ISAKMP) policy configuration mode. Step 2 key name Example: Router(config-isakmp-group)# key secret-password Router(config-isakmp-group)# Specifies the IKE pre-shared key for the group policy. Step 3 Step 4 dns primary-server Example: Router(config-isakmp-group)# dns 10.50.10.1 Router(config-isakmp-group)# Specifies the primary Domain Name Service (DNS) server for the group. Note You may also want to specify Windows Internet Naming Service (WINS) servers for the group by using the wins command. domain name Specifies group domain membership. Example: Router(config-isakmp-group)# domain company.com Router(config-isakmp-group)# Step 5 exit Example: Router(config-isakmp-group)# exit Router(config)# Exits IKE group policy configuration mode, and enters global configuration mode. Step 6 ip local pool {default | poolname} [low-ip-address [high-ip-address]] Example: Router(config)# ip local pool dynpool 30.30.30.20 30.30.30.30 Router(config)# Specifies a local address pool for the group. For details about this command and additional parameters that can be set, see the Cisco IOS Dial Technologies Command Reference. Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 7-4 OL-5332-01

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
7-4
Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide
OL-5332-01
Chapter 7
Configuring VPNs Using an IPSec Tunnel and Generic Routing Encapsulation
Configure a VPN
Configure Group Policy Information
Perform these steps to configure the group policy, beginning in global configuration mode:
Command or Action
Purpose
Step 1
crypto isakmp client configuration group
{
group-name | default}
Example:
Router(config)#
crypto isakmp client
configuration group rtr-remote
Router(config-isakmp-group)#
Creates an IKE policy group that contains
attributes to be downloaded to the remote client.
Also enters Internet Security Association Key
Management Protocol (ISAKMP) policy
configuration mode.
Step 2
key
name
Example:
Router(config-isakmp-group)#
key
secret-password
Router(config-isakmp-group)#
Specifies the IKE pre-shared key for the group
policy.
Step 3
dns
primary-server
Example:
Router(config-isakmp-group)#
dns
10.50.10.1
Router(config-isakmp-group)#
Specifies the primary Domain Name Service
(DNS) server for the group.
Note
You may also want to specify Windows
Internet Naming Service (WINS) servers
for the group by using the
wins
command.
Step 4
domain
name
Example:
Router(config-isakmp-group)#
domain
company.com
Router(config-isakmp-group)#
Specifies group domain membership.
Step 5
exit
Example:
Router(config-isakmp-group)#
exit
Router(config)#
Exits IKE group policy configuration mode, and
enters global configuration mode.
Step 6
ip local pool {default
|
poolname
}
[
low-ip-address
[
high-ip-address
]]
Example:
Router(config)#
ip local pool
dynpool
30.30.30.20 30.30.30.30
Router(config)#
Specifies a local address pool for the group.
For details about this command and additional
parameters that can be set, see the
Cisco IOS Dial
Technologies Command Reference
.