Cisco WS-SVC-IPSEC-1= - IPSec VPN Services Module Informacje Techniczne Pobierz pdf

Corporate Headquarters:

Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA

IPSec VPN Acceleration Services Module

Installation and Configuration Note

Product Number: WS-SVC-IPSEC-1

This publication describes how to install and configure the IPSec Virtual Private Network (VPN)

Acceleration Services Module in the Catalyst 6500 series switches and Cisco 7600 Series Internet

Routers.

Note Throughout this publication, the IPSec VPN Acceleration Services Module is referred to as the

VPN module.

Note Throughout this publication, the term crypto is used to refer to cryptographic.

Note For information on the latest caveats and updates for the VPN module, refer to the following

publications:

Cisco IOS Release 12.2(9)YO4 or later release notes at this URL:

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/relnotes/ol_2864.htm

Cisco IOS Release 12.2(14)SY or later release notes at this URL:

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/relnotes/ol_3975.htm

1 2 3 4 5 6 ... 97 98

Podsumowanie treści

Strona 1 - Corporate Headquarters:

Strona 2 - Contents

10IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Installing and Removing the VPN ModuleInstalling and Rem

Strona 3

11IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Installing and Removing the VPN ModuleWarningOnly traine

Strona 4 - Port VLAN and Interface VLAN

12IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Installing and Removing the VPN ModuleCaution During thi

Strona 5 - Supported Features

13IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Installing and Removing the VPN ModuleStep 2 Loosen the

Strona 6

14IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Installing and Removing the VPN ModuleWarningBefore you

Strona 7 - Software Requirements

17IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Installing and Removing the VPN ModuleVertical slotsa. P

Strona 8 - Hardware Requirements

20IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Installing and Removing the VPN ModuleFigure 8 Ejector L

Strona 9 - Front Panel Description

21IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleConfiguring a VPN

Strona 10 - Safety Overview

22IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleNote Switching to

Strona 11 - 78-14459-03 Rev C0

23IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module• WAN interface:–s

Strona 12 - Removing a VPN Module

2IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0ContentsContentsThis publication consists of these sectio

Strona 13 - Installing a VPN Module

24IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleRouted Port Mode S

Strona 14 - Horizontal slots

25IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleVPN Module Configu

Strona 15 - Vertical slots

26IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module• Switched Port An

Strona 16 - Verifying the Installation

27IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleWhen you enter the

Strona 17

28IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleMiscellaneous Guid

Strona 18

29IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleHandling Multicast

Strona 19 - Configuration Summaries

30IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module• If you insert a

Strona 20 - Trunk Port Mode Summary

31IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module• The interface MT

Strona 21

32IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleTo remove the inte

Strona 22

33IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleConfiguring the VP

Strona 23

3IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Understanding How the VPN Module WorksWhen you configure

Strona 24 - Miscellaneous Guidelines

34IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module• As with single V

Strona 25 - Handling Multicast Traffic

35IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module set transform-set

Strona 26 - Configuring MTU Settings

36IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module crypto connect vl

Strona 27 - Configuring Trunk Ports

37IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleFor complete confi

Strona 28

38IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleActive# show runBu

Strona 29

39IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module standby track Gig

Strona 30

40IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleThe following is a

Strona 31

41IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module standby delay min

Strona 32

42IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleUsing IPSec NAT Tr

Strona 33

43IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleThe following is a

Strona 34

4IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Understanding How the VPN Module WorksVPN Module Outside

Strona 35

44IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Moduleredundancymain-cpu

Strona 36

45IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleUsing Dead-Peer-De

Strona 37

46IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleCrypto Connection

Strona 38 - Using Easy-VPN Client

47IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module crypto connect vl

Strona 39

48IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module!interface Gigabit

Strona 40

49IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN Module crypto connect vl

Strona 41 - Using WAN Interfaces

50IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleFollow these guide

Strona 42

51IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleUsing QoSNote This

Strona 43 - • VLAN 101—ATM6/0/0.101

52IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleConfiguring a VPN

Strona 44 - • VLAN 16—pos6/1/0.16

53IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleStep 5 From privil

Strona 45 - Using GRE Tunneling

5IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Supported FeaturesPort VLAN 501 and port VLAN 502 are the

Strona 46

54IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleConfiguring a VPN

Strona 47 - Port Configuration Procedures

55IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleStep 6 From interf

Strona 48

56IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleFigure 12 Trunk Po

Strona 49

57IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuring a VPN Using the VPN ModuleStep 6 From interf

Strona 50

58IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration ExamplesDisplaying the VPN Running StateUs

Strona 51

59IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration ExamplesCatalyst Switch 1 (Access Port)The

Strona 52

60IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples no ip address flowcontrol receive

Strona 53

61IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration ExamplesFigure 13 Access Port Conﬁguration

Strona 54 - Configuration Examples

62IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration ExamplesCatalyst Switch 2 (Access Port)The

Strona 55

63IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examplesinterface GigabitEthernet5/1 switc

Strona 56

6IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Supported Features• Capacity–8000 tunnels (no IKE keepali

Strona 57

64IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration ExamplesCatalyst Switch 1 (Routed Port)The

Strona 58

65IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examplesinterface GigabitEthernet5/2 switc

Strona 59 - Routed Ports

66IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration ExamplesFigure 14 Routed Port Conﬁguration

Strona 60

67IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examplesredundancy main-cpu auto-sync sta

Strona 61

68IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examplesinterface Vlan1 no ip address shut

Strona 62

69IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples!crypto isakmp policy 1 encr 3des

Strona 63

70IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples!!ip access-list extended AEO-101

Strona 64 - Trunk Ports

71IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration ExamplesCatalyst Switch 2 (Trunk Port)The

Strona 65

72IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examplesinterface GigabitEthernet5/1 switc

Strona 66

73IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration ExamplesATM PortsNote This section applies

Strona 67

7IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Hardware and Software Requirements–PA-MC-2T1: 2-port mult

Strona 68

74IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples auto-sync standard!controller T3

Strona 69 - ATM Ports

75IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples crypto connect vlan 6!interface S

Strona 70

76IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples cdp enable!interface GigabitEther

Strona 71

77IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration ExamplesCatalyst Switch 2 (ATM Port)The Ca

Strona 72

78IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples multilink-group 1...!interface Mu

Strona 73 - Catalyst Switch 2 (ATM Port)

79IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples ip address 10.10.20.254 255.255.2

Strona 74

80IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration ExamplesCatalyst Switch 1 (Frame Relay Por

Strona 75 - Frame Relay Ports

81IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examplesvlan 1 tb-vlan1 1002 tb-vlan2 1003

Strona 76

82IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examplesinterface FastEthernet3/2 no ip ad

Strona 77

83IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples clock source internal frame-relay

Strona 78

8IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Hardware and Software RequirementsHardware RequirementsTh

Strona 79

84IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples!crypto isakmp policy 1 encr 3des

Strona 80

85IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples no ip address no fair-queue!inter

Strona 81

86IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examplesno ip http serverno ip http secure

Strona 82 - GRE Tunneling

87IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples flowcontrol send off switchport s

Strona 83 - Catalyst Switch 2

88IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples switchport mode trunk cdp enable!

Strona 84

89IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples!boot system flash sup-bootflash:!

Strona 85

90IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples no ip address snmp trap link-stat

Strona 86

91IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples!!no ip domain-lookup!!no mls ip m

Strona 87

92IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples cdp enable!interface Vlan1 no ip

Strona 88

93IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examplescrypto isakmp policy 1 encr 3des a

Strona 89

9IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Front Panel DescriptionNote The FlexWAN module and the Op

Strona 90 - Switch 1 Configuration

94IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples!line con 0line vty 0 4 login tran

Strona 91

95IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples!!! Enables qos globallymls qos!cr

Strona 92 - Switch 2 Configuration

96IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examples switchport trunk allowed vlan 1,1

Strona 93

97IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Configuration Examplescrypto ipsec transform-set 3des_sh

Strona 94 - Obtaining Documentation

98IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Regulatory Standards Complianceno ip http serverno ip ht

Strona 95 - Documentation Feedback

99IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Obtaining DocumentationDocumentation CD-ROMCisco documen

Strona 96 - Technical Assistance Center

100IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Obtaining Technical AssistanceObtaining Technical Assis

Strona 97 - Cisco TAC Escalation Center

101IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Obtaining Additional Publications and InformationAll cu

Strona 98

102IPSec VPN Acceleration Services Module Installation and Configuration Note78-14459-03 Rev C0Obtaining Additional Publications and Information• Inte

Komentarze do niniejszej Instrukcji

Brak uwag

Cisco WS-SVC-IPSEC-1= - IPSec VPN Services Module Informacje Techniczne

Przeglądaj online lub pobierz Informacje Techniczne dla Networking Cisco WS-SVC-IPSEC-1= - IPSec VPN Services Module. Cisco WS-SVC-IPSEC-1= - IPSec VPN Services Module Technical information [en] [fr] [nl] Instrukcja obsługi

Podsumowanie treści

Komentarze do niniejszej Instrukcji

Powiązane produkty i podręczniki dla Networking Cisco WS-SVC-IPSEC-1= - IPSec VPN Services Module