Technical information

44
IPSec VPN Acceleration Services Module Installation and Configuration Note
78-14459-03 Rev C0
Configuring a VPN Using the VPN Module
redundancy
main-cpu
auto-sync running-config
auto-sync standard
!
interface GigabitEthernet2/1
no ip address
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,513,1002-1005
switchport mode trunk
!
interface GigabitEthernet2/2
no ip address
shutdown
!
interface GigabitEthernet6/1
no ip address
flowcontrol receive on
flowcontrol send off
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,513,1002-1005
switchport mode trunk
cdp enable
!
interface GigabitEthernet6/2
no ip address
flowcontrol receive on
flowcontrol send off
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,2,1002-1005
switchport mode trunk
cdp enable
!
interface Vlan1
no ip address
shutdown
!
interface Vlan2
no ip address
crypto connect vlan 513
!
interface Vlan513
ip address 10.5.1.1 255.255.0.0
crypto map test_dyn
!
ip local pool pool1 22.0.0.2
ip local pool pool2 23.0.0.3
ip classless
ip pim bidir-enable
!
access-list 109 permit ip host 10.5.1.1 host 22.0.0.2
arp 127.0.0.12 0000.2100.0000 ARPA
!
snmp-server enable traps tty
snmp-server enable traps ipsec tunnel start
snmp-server enable traps ipsec tunnel stop
!
line con 0
line vty 0 4
password lab
transport input lat pad mop telnet rlogin udptn nasi
!
end