168.30.0/
24 into OSPF area 0
Winnipeg(config-router)#network 192.168.3.0
0.0.0.255 area 0
Any interface with an
address of 192.168.3.x is
to be placed into area 0
Winnipeg(config-router)#exit Returns to global
con?¬?guration mode
50 Con?¬?guring a Static IPsec Virtual Tunnel Interface
Step 6: Enable the Crypto Programming at the Interfaces
Con?¬?guring a Static IPsec Virtual Tunnel Interface
This section refers to Figure 4-1 and provides details about the con?¬?guration of an IPsec
virtual tunnel interface (VTI).
NOTE: The VTI method to secure multiprotocol links is preferred over secure
GRE tunnels. IPsec VTIs simplify the con?¬?guration of IPsec for protection of
remote links. This feature may not be supported in older IOS releases. Please
review the VTI restrictions in Cisco IOS Security Con?¬?guration Guide, Release
12.4, ???Part 4: Implementing IPsec and IKE??? (click the Con?¬?guring Security for
VPNs with IPsec link and then click IPsec Virtual Tunnel Interface) at Cisco.com.
The programming steps for con?¬?guring a router (for this example, the Winnipeg and
Edmonton routers) for a static IPsec VTI are as follows:
Step 1. Configure EIGRP AS 1.
Step 2. Configure Static Routing.
Step 3.
Pages:
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58