Cisco 7100 Series Dokumentacja Pobierz pdf (Strona 88)

Step 2—Configuring Encryption and an IPSec Tunnel

Cisco 7100 Series VPN Configuration Guide

4-16

Figure 4-4 IPSec in Tunnel and Transport Modes

Verifying Transform Sets and IPSec Tunnel Mode

To verify the conﬁguration:

• Enter the show crypto ipsec transform-set EXEC command to see the type of

transform set conﬁgured on the router.

hq-sanjose# show crypto ipsec transform-set

Transform set proposal4: { ah-sha-hmac }

will negotiate = { Tunnel, },

{ esp-des esp-sha-hmac }

will negotiate = { Tunnel, },

-Display text omitted-

IP HDR

23246

Data

Encrypted

Tunnel mode

IP HDR Data

Encrypted

IPSec HDRNew IP HDR

IP HDR Data

Transport mode

DataIPSec HDRIP HDR

1 2 ... 83 84 85 86 87 88 89 90 91 92 93 ... 111 112

Brak uwag

Cisco 7100 Series Dokumentacja Strona 88