Chapter 2
Cisco 1710 Security Router Configuration
Complete Sample Configuration
Network Access Router Configuration
The following commands configure the network access router so that it provides
a secure connection to the Cisco 1710 Security router.
crypto isakmp key 12abcjhrweit345 address 24.19.216.150
!
crypto isakmp policy 1
authentication pre-share
encryption 3des
hash sha
group 2
!
crypto ipsec transform-set proposal1 esp-3des esp-sha-hmac ah-sha-hmac
!
crypto map mymap1 local-address FastEthernet0/1
crypto map tag 10 ipsec-isakmp
set peer 24.19.216.150
set security-association level per-host
set transform-set proposal1
set pfs group2
match address 100
!
access-list 100 permit 172.28.0.0 0.0.255.255
!
interface FastEthernet0/1
ip address 16.0.0.2 255.0.0.0
crypto map tag
!
interface FastEthernet0/0
ip address 172.28.0.1 255.255.0.0
Cisco 1710 Security Router Software Configuration Guide
2-19
78-12696-01