Technical information

38
IPSec VPN Acceleration Services Module Installation and Configuration Note
78-14459-03 Rev C0
Configuring a VPN Using the VPN Module
Active# show run
Building configuration...
Current configuration : 2235 bytes
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Active
!
boot system flash sup-bootflash:
!
redundancy
main-cpu
auto-sync standard
ip subnet-zero
!
!
no ip domain-lookup
!
!
ssp group 100
remote 40.0.0.2
redundancy KNIGHTSOFNI
no mls ip multicast aggregate
no mls ip multicast non-rpf cef
!
crypto isakmp policy 1
encr 3des
authentication pre-share
crypto isakmp key NEEWOMM address 0.0.0.0 0.0.0.0
crypto isakmp ssp 100
!
!
crypto ipsec security-association lifetime seconds 86400
!
crypto ipsec transform-set TS1 esp-3des esp-sha-hmac
!
crypto map ha ha replay-interval inbound 10 outbound 1000
crypto map ha 10 ipsec-isakmp
set peer 172.16.31.3
set transform-set TS1
match address 101
!
!
spanning-tree extend system-id
no spanning-tree vlan 4
!
!
!
interface GigabitEthernet1/1
no ip address
no ip redirects
crypto connect vlan 4
!
interface GigabitEthernet1/2
ip address 40.0.0.1 255.255.255.0
no ip redirects
standby delay minimum 35 reload 60
standby ip 40.0.0.100
standby timers 1 3
standby preempt