Configure Group Policy Information - Cisco 520-T1 - Small Business Pro SR Secure Router Software Configuration Manual

Configure Group Policy Information

Command or Action
Step 5
group {1 | 2 | 5}
Example:
Router(config-isakmp)# group 2
Router(config-isakmp)#
Step 6
lifetime seconds
Example:
Router(config-isakmp)# lifetime 480
Router(config-isakmp)#
Step 7 exit
Example:
Router(config-isakmp)# exit
Router(config)#
Configure Group Policy Information
Perform these steps to configure the group policy, beginning in global configuration mode:
Command or Action
Step 1
crypto isakmp client configuration group
{group-name | default}
Example:
Router(config)# crypto isakmp client
configuration group rtr-remote
Router(config-isakmp-group)#
Step 2 key name
Example:
Router(config-isakmp-group)# key
secret-password
Router(config-isakmp-group)#
Step 3 dns primary-server
Example:
Router(config-isakmp-group)# dns 10.50.10.1
Router(config-isakmp-group)#
Cisco Secure Router 520 Series Software Configuration Guide
6-4
Chapter 6 Configuring a VPN Using Easy VPN and an IPsec Tunnel
Purpose
Specifies the Diffie-Hellman group to be used in
an IKE policy.
Specifies the lifetime, 60–86400 seconds, for an
IKE security association (SA).
Exits IKE policy configuration mode, and enters
global configuration mode.
Purpose
Creates an IKE policy group containing attributes
to be downloaded to the remote client.
Also enters the Internet Security Association Key
and Management Protocol (ISAKMP) group
policy configuration mode.
Specifies the IKE pre-shared key for the group
policy.
Specifies the primary Domain Name System
(DNS) server for the group.
You may also want to specify Windows
Note
Internet Naming Service (WINS) servers
for the group by using the wins command.
OL-14210-01