Cisco Router 860, 880 Series User Manual
Here you can view all the pages of manual Cisco Router 860, 880 Series User Manual. The Cisco manuals for Router are available online for free. You can easily download all the documents as PDF.
Page 111
6-17 Book Title OL-xxxxx-xx Chapter 6 Configuring Security Features Configuring VPN Configuration Example The following configuration example shows a portion of the configuration file for a VPN using a GRE tunnel scenario described in the preceding sections. !aaa new-model ! aaa authentication login rtr-remote local Step 4tunnel destination default-gateway-ip-address Example: Router(config-if)# tunnel destination 192.168.101.1 Router(config-if)# Specifies the destination endpoint of the...
Page 112
6-18 Book Title OL-xxxxx-xx Chapter 6 Configuring Security Features Configuring VPN aaa authorization network rtr-remote localaaa session-id common ! username cisco password 0 cisco! interface tunnel 1 ip address 10.62.1.193 255.255.255.252 tunnel source fastethernet 0 tunnel destination interface 192.168.101.1 ip route 20.20.20.0 255.255.255.0 tunnel 1 crypto isakmp policy 1 encryption 3desauthentication pre-share group 2 !crypto isakmp client configuration group rtr-remote key secret-password...
Page 113
6-19 Book Title OL-xxxxx-xx Chapter 6 Configuring Security Features Configuring VPN ip address 210.110.101.21 255.255.255.0 ! acl 103 permits IPsec traffic from the corp. router as well as ! denies Internet-initiated traffic inbound. ip access-group 103 in ip nat outside no cdp enable crypto map to_corporate ! Applies the IPsec tunnel to the outside interface.! ! Utilize NAT overload in order to make best use of the ! single address provided by the ISP.ip nat inside source list 102...
Page 114
6-20 Book Title OL-xxxxx-xx Chapter 6 Configuring Security Features Configuring VPN
Page 115
CH A P T E R 7-1 Book Title OL-xxxxx-xx 7 Configuring the Ethernet Switches This chapter gives an overview of configuration tasks for the 4-port Fast Ethernet (FE) switch, and for the Gigabit Ethernet (GE) switch that services the embedded wireless access point on the Cisco 860 and Cisco 880 series Integrated Services Routers (ISRs). The FE switches are 10/100Base T Layer 2 Fast Ethernet switches. Traffic between different VLANs on a switch is routed through the router platform with the switched...
Page 116
7-2 Book Title OL-xxxxx-xx Chapter 7 Configuring the Ethernet Switches Information About Ethernet Switches Information About Ethernet Switches To configure Ethernet switches, you should understand the following concepts: VLANs and VLAN Trunk Protocol, page 7-2 Inline Power, page 7-2 Layer 2 Ethernet Switching, page 7-2 802.1x Authentication, page 7-3 Spanning Tree Protocol, page 7-3 Cisco Discovery Protocol, page 7-3 Switched Port Analyzer, page 7-3 IGMP Snooping, page 7-3 Storm...
Page 117
7-3 Book Title OL-xxxxx-xx Chapter 7 Configuring the Ethernet Switches Information About Ethernet Switches 802.1x Authentication For information on the concept of 802.1x Authentication, see the information at this URL: http://www.cisco.com/en/US/docs/ios/12_3t/12_3t4/feature/guide/gt1636nm.html#wp1051006 Spanning Tree Protocol For information on the concept of Spanning Tree Protocol, see the information at this URL:...
Page 118
7-4 Book Title OL-xxxxx-xx Chapter 7 Configuring the Ethernet Switches How to Configure Ethernet Switches Storm Control For information on the concept of storm control, see the information at this URL: http://www.cisco.com/en/US/docs/ios/12_3t/12_3t4/feature/guide/gt1636nm.html#wp1051018 Fallback Bridging For information on the concept of fallback bridging, see the information at this URL: http://www.cisco.com/en/US/docs/ios/12_3t/12_3t4/feature/guide/gt1636nm.html#wp1054833 How to Configure...
Page 119
7-5 Book Title OL-xxxxx-xx Chapter 7 Configuring the Ethernet Switches How to Configure Ethernet Switches For additional information, see the information at the following URL: http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/layer2.ht ml VLANs on the GE Port Because the GE port is an internal interface that services only the router’s embedded access point, it cannot be configured only with the command switchport access vlan X, where X is other than 1. It...
Page 120
7-6 Book Title OL-xxxxx-xx Chapter 7 Configuring the Ethernet Switches How to Configure Ethernet Switches Configuring Layer 2 Interfaces For information on how to configure Layer 2 interfaces, see the following URL: http://www.cisco.com/en/US/docs/ios/12_3t/12_3t8/feature/guide/esw_cfg.html#wp1047041 The URL contains information on the following topics: Configuring a range of interfaces Defining a range macro Configuring Layer 2 optional interface features Configuring 802.1x Authentication...