Sophos 2 cisco router
Zur Navigation springen
Zur Suche springen
Cisco Site
!IKE Phase 1
crypto isakmp policy 10 encr aes 256 authentication pre-share group 5 exit
!ACL
ip access-list extended vpn-cisco-sophos-net permit ip 10.20.30.0 0.0.0.255 10.20.0.0 0.0.255.255 exit
!PSK zum VPN-GW ordnen
crypto isakmp key 0 sehr-geheim address 192.168.244.130
!IKE Phase 2
crypto ipsec transform-set AES-256-MD5 esp-aes 256 esp-md5-hmac exit
!Zusammenfassen von Phase 1 und Phase 2
crypto map cisco-sophos 10 ipsec-isakmp set peer 192.168.244.130 set transform-set AES-256-MD5 match address vpn-cisco-sophos-net set pfs group5 exit
!Anwenden der Crypto Map auf die Schnittstelle
interface fastEthernet 0/0