Filter
Top Products
3-15
Cisco uBR924 Software Configuration Guide
OL-0337-05 (8/2002)
Chapter 3 Advanced Data-Only Configurations
IPSec (56-bit) Example
no service finger
!
access-list 200 permit ip host 10.1.0.25 30.1.1.0 0.0.0.255
!
line con 0
exec-timeout 0 0
transport input none
line vty 0 4
login
!
end
Note The above configuration assumes that the DHCP server assigns an IP address to the cable interface that
is in the class A private network (10.0.0.0).
Additional Documentation
Establishing IPSec encryption between two or more end-points requires a thorough understanding of the
Internet Key Exchange (IKE) mechanism, which is a form of the ISAKMP/Oakley (Internet Security
Association Key Management Protocol) that is used for IPSec encryption. Digital certificates must also
be understood if this mechanism is going to be used for authentication. Finally, if IPSec will be used as
part of a virtual private network (VPN), those concepts must be understood as well.
For general information on these subjects, see the following information in the product literature and IP
technical tips sections on CCO:
• Deploying IPSec—Provides an overview of IPSec encryption and its key concepts, along with
sample configurations. Also provides a link to many other documents on related topics.
• Certificate Authority Support for IPSec Overview—Describes the concept of digital certificates and
how they are used to authenticate IPSec users.
• An Introduction to IP Security (IPSec) Encryption—Provides a step-by-step description of how to
configure IPSec encryption.
The following technical documents, available on CCO and the Documentation CD-ROM, also provide
more in-depth configuration information:
• Cisco IOS Release 12.1 Security Configuration Guide—Provides an overview of Cisco IOS security
features.
• Cisco IOS Release 12.0 Security Command Reference—Provides a reference for each of the
Cisco IOS commands used to configure IPSec encryption and related security features.
• Cisco IOS Software Release 12.1 Command Summary—Summarizes the Cisco IOS commands used
to configure all Release 12.0 security features.
Note Additional documentation on IPSec becomes available on CCO and the Documentation CD-ROM as new
features and platforms are added.