Section 5.0: IPSec/PPTP Configuration

5.1. IPSec LAN-to-LAN Router-to-PIX

  1. Configure LAN-to-LAN IPSec between R6 and PIX for the VLAN5 and VLAN2 networks, respectively.

  2. Use preshared with other parameters as you feel appropriate, as demonstrated in the following example:

     ! <R6 configuration> hostname r6 ! crypto isakmp policy 10 authentication pre-share group 2 crypto isakmp key cisco address 164.15.4.3 ! ! crypto ipsec transform-set lab6 esp-des esp-md5-hmac ! ! crypto map lab6 10 ipsec-isakmp set peer 164.15.4.3 set transform-set lab6 match address 101 ! interface Serial1/0.1 multipoint ip address 165.1.2.17 255.255.255.248 crypto map lab6 ! <PIX configuration> hostname PIX ! access-list nonat permit ip 10.1.1.0 255.255.255.0 10.1.2.0 255.255.255.0 ...

Get CCIE Security Practice Labs now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.