From: Mike McSpedon (Mike@xxxxxxxx)
Date: Sat Jan 15 2000 - 01:13:22 GMT-3
Let me preface this by saying I do not know what is on the lab with respect
to VPNs. Having said that, an IPSec VPN is actually surprisingly simple to
configure if you're using pre-shared keys. Others on this have posted
their configs recently and have made excellent recommendations about what
to read on Cisco's web site, so I will not duplicate this. I'll just add
that this is something that is worth debugging and watching on both the
sides until you're really familiar with the sequence of events involved in
setting up and establishing the VPN.
Use:
deb cry ipsec
deb cry isak
deb cry engin
show cry ipsec sa (quick way to see if you're really encrypting: encaps
and decaps should increment as traffic flows over the VPN)
show cry isak
show cry map
HTH,
Mike
At 09:33 PM 1/14/00 EST, Curtis Phillips wrote:
>You raise a good point. I was under th eimpression that all of the encryption
>and ipsec was not going to be required.
>
>"zhencai" <zhencai@home.com> wrote:
>Hi,
>
>I noticed that this topic had been discussed a little in this group, but I'm
>still kind of confused. I was wondering what I should know for the lab
>test(yeah, I know, everything, but...) Since VPN is quite a broad topic, I'd
>like to find out what you guys think.
>Thanks a lot.
>
>Zhen Cai
>
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:22:44 GMT-3