Task 3 Configure IPSec

The next major task in configuring Cisco IOS IPSec is to configure the IPSec parameters gathered in Task 1, Step 3. The general steps used to configure IPSec encryption on Cisco routers are summarized as follows. This chapter looks at each configuration step in detail.

• Step 3-1 Configure transform set suites

• Step 3-2 Configure global IPSec security association lifetimes

• Step 3-3 Configure crypto ACLs

• Step 3-4 Configure crypto maps

• Step 3-5 Apply the crypto maps to the interface