Section 5.0: IPSec/PPTP Configuration

5.1. IPSec LAN-to-LAN Router-to-PIX

  1. Configure LAN-to-LAN IPSec between R6 and PIX for the VLAN5 and VLAN2 networks, respectively.

  2. Use preshared with other parameters as you feel appropriate, as demonstrated in the following example:

     ! <R6 configuration> hostname r6 ! crypto isakmp policy 10 authentication pre-share group 2 crypto isakmp key cisco address 164.15.4.3 ! ! crypto ipsec transform-set lab6 esp-des esp-md5-hmac ! ! crypto map lab6 10 ipsec-isakmp set peer 164.15.4.3 set transform-set lab6 match address 101 ! interface Serial1/0.1 multipoint ip address 165.1.2.17 255.255.255.248 crypto map lab6 ! <PIX configuration> hostname PIX ! access-list nonat permit ip 10.1.1.0 255.255.255.0 10.1.2.0 255.255.255.0 ...

Get CCIE Security Practice Labs now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial