The
Winnipeg and Edmonton routers have a basic con?¬?guration to which additional
programming will be added.
34 Con?¬?guring a Teleworker to Branch Of?¬?ce VPN Using CLI
Figure 4-1 VPN Network Topology
Con?¬?guring a Teleworker to Branch Of?¬?ce VPN Using CLI
This section refers to Figure 4-1 and provides details about the con?¬?guration for the
Edmonton router.
The following steps are used to con?¬?gure the Edmonton router:
Step 1. Configure the Internet Security Association and Key Management Protocol
(ISAKMP) policy (IKE phase 1).
Step 2. Configure policies for the client group(s).
Step 3. Configure the IPsec transform sets (IKE phase 2).
Step 4. Configure router AAA and add VPN client users.
Step 5. Create VPN client policy for security association negotiation.
Step 6. Configure the crypto map.
Step 7. Apply the crypto map to the interface.
Step 8. Verify the VPN service.
WS3
Teleworker
Workstation 3
128.107.1.129/24
fa 0/0
128.107.55.9/24
fa 0/1
192.168.30.1/24
s 0/0
192.135.250.2/30
Corporate
Headquarters
Winnipeg
LAN
192.168.30.0/24
Workstation 1
192.168.30.10/24
WS1
Branch Office
Edmonton
LAN
10.10.30.0/24
Workstation 2
10.10.30.10/24
WS2
e 0/1
128.107.50.2/24
s 0/0
192.
Pages:
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45