Cisco 3945 User Manual

134
Cisco 3900 Series, Cisco 2900 Series, and Cisco 1900 Series Integrated Services Routers Generation 2 Software Configuration Guide
Chapter Configuring Security Features
Configuring VPN
The examples shown in this chapter apply only to the endpoint configuration on the Cisco 3900 series,
2900 series, and 1900 series ISRs. Any VPN connection requires both endpoints to be properly
configured in order to function. See the software configuration documentation as needed to configure
VPN for other router models.
VPN configuration information must be configured on both endpoints. You must specify parameters
such as internal IP addresses, internal subnet masks, DHCP server addresses, and Network Address
Translation (NAT).
• “Configure a VPN over an IPSec Tunnel” section on page 134
• “Create a Cisco Easy VPN Remote Configuration” section on page 143
• “Configure a Site-to-Site GRE Tunnel” section on page 146
Configure a VPN over an IPSec Tunnel
Perform the following tasks to configure a VPN over an IPSec tunnel:
• Configure the IKE Policy, page 135
• Configure Group Policy Information, page 136
• Apply Mode Configuration to the Crypto Map, page 138
• Enable Policy Lookup, page 139
• Configure IPSec Transforms and Protocols, page 140
• Configure the IPSec Crypto Method and Parameters, page 141
• Apply the Crypto Map to the Physical Interface, page 142
• Where to Go Next, page 143

Cisco 3945 Specifications

General

Form Factor	Rack-mountable
Maximum Throughput	75 Mbps
Product Type	Router
Connectivity Technology	Wired
Data Link Protocol	Ethernet, Fast Ethernet, Gigabit Ethernet
Operating System	Cisco IOS
Flash Memory	256 MB
Network/Transport Protocol	IPSec
Remote Management Protocol	SNMP
Encryption Algorithm	DES, AES
Features	Firewall, VPN, Quality of Service (QoS), VLAN support
Interfaces	2 x USB
Security Features	Intrusion Prevention System (IPS)
Operating Temperature	32 °F to 104 °F (0 °C to 40 °C)
Storage Temperature	-4 °F to 149 °F (-20 °C to 65 °C)
Humidity	10 - 85% (non-condensing)
Memory	2 GB
Expansion Slots	4 (free) x EHWIC ¦ 2 x service module ¦ 1 x ISM ¦ 1 x CompactFlash Card