IPSec for network security (continued Cisco device implementation)

Case topology Map

Cisco (3640) realizes

Step 1: The basic configuration of a router

A (config) #do Sho run

Building configuration ...

Current configuration:1410 bytes

!

Version 12.4

Service Timestamps Debug DateTime msec

Service Timestamps log datetime msec

No service password-encryption

!

Hostname A

!

Boot-start-marker

Boot-end-marker

!

!

No AAA New-model

Memory-size Iomem 5

!

!

IP CEF

No IP domain Lookup

IP domain name lab.local

!

Crypto ISAKMP policy 1

Authentication Pre-share

Crypto ISAKMP key 123 address 61.130.132.1

Crypto ISAKMP key 123 address 61.130.133.1

!

!

Crypto IPSec Transform-set vpnc Ah-md5-hmac esp-des Esp-md5-hmac

Crypto IPSec Transform-set VPNB Ah-md5-hmac esp-des Esp-md5-hmac

!

Crypto map Vpn-set IPSEC-ISAKMP

Set Peer 61.130.132.1

Set Transform-set VPNB

Match Address 110

Crypto map Vpn-set IPSEC-ISAKMP

Set Peer 61.130.133.1

Set Transform-set VPNC

Match Address 120

!

!

!

!

!