Technical information

69
IPSec VPN Acceleration Services Module Installation and Configuration Note
78-14459-03 Rev C0
Configuration Examples
!
crypto isakmp policy 1
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp key Jolly-Good-Fellow address 192.168.100.254
!
!
crypto ipsec transform-set TS-101 esp-3des esp-sha-hmac
!
crypto map MAP-101 10 ipsec-isakmp
set peer 192.168.100.254
set security-association lifetime kilobytes 10000
set security-association lifetime seconds 86000
set transform-set TS-101
match address AEO-101
!
!
no spanning-tree vlan 171
!
!
!
interface GigabitEthernet1/1
ip address 10.80.1.254 255.255.255.0
!
interface GigabitEthernet1/2
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,271,1002-1005
switchport mode trunk
no ip address
!
interface GigabitEthernet5/1
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,171,1002-1005
switchport mode trunk
no ip address
flowcontrol receive on
!
interface GigabitEthernet5/2
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,271,1002-1005
switchport mode trunk
no ip address
flowcontrol receive on
!
interface Vlan1
no ip address
shutdown
!
interface Vlan171
ip address 192.168.100.253 255.255.255.0
crypto map MAP-101
!
interface Vlan271
no ip address
crypto connect vlan 171
!
ip classless
ip route 10.83.3.0 255.255.255.0 192.168.100.254
no ip http server