VPN With Pre-Shared Keys - Page 2

By  Cisco Press | Oct 30, 2001
Page 2 of 6   |  Back to Page 1
Print ArticleEmail Article
  • Share on Facebook
  • Share on Twitter
  • Share on LinkedIn

Explanation of VPN with Preshared Keys
Going back to the configuration, you can see that it is really quite simple to enable preshared keys. The following section will walk you through the configuration and explain what has been configured.

First, set the host name. The fully qualified domain name (FQDN) is set with the domain-name command. 

 hostname chicago
 domain-name bigcompany.com
Then set ISAKMP to the outside interface and define that you use preshared keys and 3DES encryption. 
 isakmp enable outside
 isakmp policy 15 authentication pre-share
 isakmp policy 15 encr 3des
The ISAKMP key, whose value is isakampkey, is set, along with the IP address of the outside interface of the peer. Then set transform-set to first use esp-sha-hmac and then esp-3des. 
 crypto ipsec transform-set strong esp-sha-hmac esp-3des
Define an access list for use with the crypto map command, setting the permitted IP addresses to match the remote site's IP address. 
 access-list myaccesslist permit ip 10.1.2.0 255.255.255.0
Next, map the traffic to be encrypted, set the peer, and set the interface. 
 crypto map seattletraffic 29 ipsec-isakmp
 crypto map seattletraffic 29 match address myaccesslist
 crypto map seattletraffic 29 set transform-set strong
 crypto map seattletraffic 29 set peer 172.30.1.2
 crypto map seattletraffic interface outside
Finally, set the PIX to allow IPSec traffic through the interfaces. 
 sysopt connection permit-ipsec
The only real differences between the branch office and the main office configurations are that the peers are set to the other office's PIX outside interface, and the traffic to be encrypted is set to the other office's LAN.

jfreund@internet.com

Comment and Contribute
(Maximum characters: 1200). You have
characters left.
Get the Latest Scoop with Enterprise Networking Planet Newsletter
Helpful Links

  • Yankee Group Mobile WAN Optimization Report

    Mobile work continues to evolve. Your organization must keep up with the demands of its mobile workforce. This report introduces the concept of mobile WAN optimization and provides three case studies including RCM, PRTM and Einstein that highlight how this emerging technology can help IT departments achieve what previously appeared to be conflicting goals. Read >

  • Network Security Resources

    More threats than ever before pose a danger to today's enterprise network. Get the latest tips and intel on the newest risks in our guide to network security resources. Read >

  • Extreme Savings: Cutting Costs with WAN Optimization

    Did you know it's possible to cut IT costs without impacting day-to-day IT operations? In fact, when you download this whitepaper from Riverbed on cost-savings through WAN optimization, you'll discover how businesses of all different sizes have realized a return on investment in just a few months through significant hard cost savings in areas such as bandwidth reduction and IT consolidation. It's called Extreme Savings and its only from Riverbed. Read >