Specifications

Configuring Security Features
Configuring VPN
17
Cisco 3900 Series, 2900 Series, and 1900 Series Integrated Services Routers Software Configuration Guide
OL-21850-01
Where to Go Next
If you are creating a Cisco Easy VPN remote configuration, go to the “Create a Cisco Easy VPN Remote
Configuration” section on page 17.
If you are creating a site-to-site VPN using IPSec tunnels and GRE, go to the “Configure a Site-to-Site
GRE Tunnel” section on page 20.
Create a Cisco Easy VPN Remote Configuration
The router that is acting as the Cisco Easy VPN client must create a Cisco Easy VPN remote
configuration and assign it to the outgoing interface.
To create the remote configuration, follow these steps, beginning in global configuration mode.
SUMMARY STEPS
1. crypto ipsec client ezvpn name
2. group group-name key group-key
3. peer {ipaddress | hostname}
4. mode {client | network-extension | network extension plus}
5. exit
6. crypto isakmp keepalive seconds
7. interface type number
8. crypto ipsec client ezvpn name [outside | inside]
9. exit
Step 2
crypto map map-name
Example:
Router(config-if)# crypto map static-map
Router(config-if)#
Applies the crypto map to the interface.
See Cisco IOS Security Command Reference for
more detail about this command.
Step 3
exit
Example:
Router(config-crypto-map)# exit
Router(config)#
Returns to global configuration mode.
Command or Action Purpose