Cisco 3925 User Manual

146
Cisco 3900 Series, Cisco 2900 Series, and Cisco 1900 Series Integrated Services Routers Generation 2 Software Configuration Guide
Chapter Configuring Security Features
Configuring VPN
crypto ipsec client ezvpn ezvpnclient
connect auto
group 2 key secret-password
mode client
peer 192.168.100.1
!
interface fastethernet 4
crypto ipsec client ezvpn ezvpnclient outside
crypto map static-map
!
interface vlan 1
crypto ipsec client ezvpn ezvpnclient inside
!
Configure a Site-to-Site GRE Tunnel
To configure a site-to-site GRE tunnel, follow these steps, beginning in global configuration mode.
SUMMARY STEPS
1. interface type number
2. ip address ip-address mask
3. tunnel source interface-type number
4. tunnel destination default-gateway-ip-address
5. crypto map map-name
6. exit
7. ip access-list {standard | extended} access-list-name
8. permit protocol source source-wildcard destination destination-wildcard
9. exit
DETAILED STEPS
Command or Action Purpose
Step 1
interface type number
Example:
Router(config)# interface tunnel 1
Router(config-if)#
Creates a tunnel interface and enters interface
configuration mode.
Step 2
ip address ip-address mask
Example:
Router(config-if)# 10.62.1.193
255.255.255.252
Router(config-if)#
Assigns an address to the tunnel.

Cisco 3925 Specifications

General

Product Type	Router
Form Factor	Rack-mountable
Data Link Protocol	Ethernet, Fast Ethernet, Gigabit Ethernet
Connectivity Technology	Wired
Power	AC 120/230 V (50/60 Hz)
Redundant Power Supply	Optional
Routing Protocol	OSPF, IS-IS, BGP, EIGRP, PIM
Network/Transport Protocol	IPSec
Remote Management Protocol	SNMP, Telnet, SSH, HTTP
Encryption Algorithm	DES, Triple DES, AES
Flash Memory	256 MB
Weight	11.5 kg
Interfaces	2 x SFP (mini-GBIC)
Power Source	Internal power supply
Authentication Method	RADIUS, TACACS+, LDAP
Compliant Standards	IEEE 802.1Q, IEEE 802.3af
Operating Temperature	0 to 40 °C
Operating Humidity	5% to 85% (non-condensing)
Dimensions (WxDxH)	44.5 x 47.2 x 8.9 cm

Summary

Configuring Ethernet CFM and Y.1731 Performance Monitoring on Layer 3 Interfaces

Configuring EtherChannel

Configuring EtherChannel

Steps to configure EtherChannel.

Configuring Backup Data Lines and Remote Management

Configuring Power Efficiency Management

Configuring Security Features

Configuring Cisco IOS Firewall

Zone-Based Policy Firewall

Configuring Cisco IOS IPS

Configuring VPN

Configure a VPN over an IPSec Tunnel

Steps to configure a VPN over an IPSec tunnel.

Create a Cisco Easy VPN Remote Configuration

Steps to create Cisco Easy VPN remote configuration.

Configure a Site-to-Site GRE Tunnel

Steps to configure a site-to-site GRE tunnel.

Apply Mode Configuration to the Crypto Map

Applies mode configuration to the crypto map.

Enable Policy Lookup

Enables policy lookup through AAA.

Configure IPSec Transforms and Protocols

Configures IPSec transforms and protocols.

Configure the IPSec Crypto Method and Parameters

Configures IPSec crypto method and parameters.

Apply the Crypto Map to the Physical Interface

Applies the crypto map to the physical interface.

SGT over Ethernet Tagging

Configuring SGT over Ethernet Tagging

Steps to configure SGT over Ethernet Tagging.

Configuring Identity Features on Layer 3 Interface

Unified Communications on Cisco Integrated Services Routers

Configuring Next-Generation High-Density PVDM3 Modules

How to Verify and Troubleshoot the Functionality of the PVDM3 Cards on Cisco Voice Gateways

Configuring Multi-Gigabit Fabric Communication

Upgrading the Cisco IOS Software

How to Upgrade the Cisco IOS Image

Provides steps to upgrade the Cisco IOS image.

How to Upgrade the IOS Image on the Access Point

Steps to upgrade the IOS image on the access point.

Configuring the Wireless Device

Starting a Wireless Configuration Session

Steps to start a wireless configuration session.

Upgrading to Cisco Unified Software

Steps to upgrade to Cisco Unified software.

Configuring Radio Settings

Enabling the Radio Interface

Steps to enable the radio interface.

Configuring Radio Transmit Power

Configures radio transmit power.

Configuring Radio Channel Settings

Configures radio channel settings.

Configure RTS Threshold and Retries

Configures RTS threshold and retries.

Configuring the Maximum Data Retries

Configures maximum data retries.

Configuring the Fragmentation Threshold

Configures the fragmentation threshold.

Administering the Wireless Device

Preventing Unauthorized Access to Your Access Point

Steps to prevent unauthorized access to the access point.

Protecting Access to Privileged EXEC Commands

Protects access to privileged EXEC commands.

Controlling Access Point Access with RADIUS

Controls access point access using RADIUS.

Controlling Access Point Access with TACACS+

Controls access point access using TACACS+.

Configuring a System Name and Prompt

Configures system name and prompt.

Configuring the Access Point to Provide DHCP Service

Configures the access point to provide DHCP service.

Configuring the Access Point for Secure Shell

Configures the Secure Shell (SSH) feature.

APPENDIX A Cisco IOS CLI for Initial Configuration

Using the Cisco IOS CLI to Perform Initial Configuration

Steps to perform initial configuration using CLI.

APPENDIX B Using CompactFlash Memory Cards

How to Format CompactFlash Memory Cards

Steps to format CompactFlash memory cards.

APPENDIX C Using ROM Monitor

How to Use the ROM Monitor—Typical Tasks

Describes typical tasks for using ROM Monitor.

APPENDIX D Changing the Configuration Register Settings

Changing the Configuration Register Settings

Steps to change configuration register settings.

Configuring the Console Line Speed (Cisco IOS CLI)

Configures console line speed using Cisco IOS CLI.