Cisco Systems C7200 Network Cables User Manual


 
CHAPTER
4-1
C7200 VSA (VPN Services Adapter) Installation and Configuration Guide
OL-9129-02
4
Configuring the VSA
This chapter contains the information and procedures needed to configure the C7200-VSA (VPN Services
Adapter). This chapter contains the following sections:
Overview, page 4-1
Configuration Tasks, page 4-1
Configuration Examples, page 4-18
Basic IPSec Configuration Illustration, page 4-19
Troubleshooting Tips, page 4-21
Monitoring and Maintaining the VSA, page 4-23
Overview
The VSA in the I/O controller slot provides encryption services for the I/O controller port in the
Cisco 7204VXR or Cisco 7206VXR router with a NPE-G2 processor. If you have previously configured
IPSec on the router and you install a VSA, the VSA automatically performs encryption services.
Note The Cisco 7204VXR and the 7206VXR routers support a single VSA.
There are no interfaces to configure on the VSA.
This section only contains basic configuration information for enabling encryption and IPSec tunneling
services. Refer to the “IP Security and Encryption” part of the Security Configuration Guide and the
Security Command Reference guide for detailed configuration information on IPSec, IKE, and CA.
Configuration Tasks
On power up, the VSA is fully functional and does not require any configuration commands. However,
for the VSA to provide encryption services, you must complete the steps in the following sections:
Using the EXEC Command Interpreter, page 4-2 (required)
Configuring an IKE Policy, page 4-2 (required)
Configuring a Transform Set, page 4-4 (required)
Configuring IPSec, page 4-8 (required)