Step 1: Create the GRE Tunnel
Winnipeg(config)#interface tunnel0 Enters interface
con?¬?guration mode
(virtual GRE tunnel
interface)
Winnipeg(config-if)#ip address 192.168.3.1
255.255.255.0
Assigns the tunnel IP
address and netmask
Winnipeg(config-if)#tunnel source fastethernet
0/0
De?¬?nes the local tunnel
interface
Winnipeg(config-if)#tunnel destination
192.31.7.1
Programs the far-end
tunnel IP
NOTE: The peer
termination router has
mirrored programming
with ???tunnel destination
128.107.55.9.???
Winnipeg(config-if)#no shutdown Turns on the tunnel
interface
Con?¬?guring GRE Tunnels over IPsec 47
Step 2: Specify the IPsec VPN Authentication Method
Step 3: Specify the IPsec VPN IKE Proposals
Winnipeg#configure terminal Enters global
con?¬?guration mode
Winnipeg(config)#crypto isakmp policy 10 Creates an IKE phase 1
policy
Winnipeg(config-isakmp)#authentication
pre-share
Speci?¬?es use of a preshared
encryption key
Winnipeg(config-isakmp)#encryption 3des Speci?¬?es use of 3DES
encryption
Winnipeg(config-isakmp)#group 2 Speci?¬?es use of the Dif?¬?e-
Hellman group 2 hashing
algorithm
Winnipeg(config-isakmp)#exit Exits isakmp con?¬?guration
mode
Winnipeg(config)#crypto isakmp key 12345678
address 192.
Pages:
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55