Also, the
transform set is the only
parameter that must
be de?¬?ned under the
pro?¬?le.
Edmonton(config)#crypto ipsec profile
PROFILE-1
Creates the Edmonton
IPsec pro?¬?le PROFILE-1
on the Edmonton router
Edmonton(ipsec-profile)#set transform-set
TRANSFORM-1
Links the transform
TRANSFORM-1 to the
pro?¬?le PROFILE-1
Winnipeg(config)#interface tunnel 0 Creates a ???tunnel???
interface
Winnipeg(config-if)#ip address 192.168.3.1
255.255.255.0
Assigns the tunnel IP
address
Winnipeg(config-if)#tunnel source fastethernet
0/0
Declares the local physical
interface used by the
tunnel interface
Winnipeg(config-if)#tunnel destination
128.107.50.2
Names the IP address of
the remote tunnel endpoint
Winnipeg(config-if)#tunnel mode ipsec ipv4 Sets IPsec using IPv4 as
the encapsulation mode
for the tunnel interface
Winnipeg(config-if)#tunnel protection ipsec
profile PROFILE-1
Associates the tunnel
interface with the IPsec
pro?¬?le
56 Con?¬?guring a Static IPsec Virtual Tunnel Interface
Edmonton(config)#interface tunnel 0 Creates a tunnel interface
Edmonton(config-if)#ip address 192.168.3.2
255.255.255.0
Assigns the tunnel IP
address and netmask
Edmonton(config-if)#tunnel source ethernet 0/1 Declares the local physical
interface used by the
tunnel interface
Edmonton(config-if)#tunnel destination
128.
Pages:
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63