Configure Group Policy Information - Cisco 520-T1 - Small Business Pro SR Secure Router Software Configuration Manual

Configure a VPN

Configure Group Policy Information

Perform these steps to configure the group policy, beginning in global configuration mode:
Command or Action
Step 1 crypto isakmp client configuration group
{group-name | default}
Example:
Router(config)# crypto isakmp client
configuration group rtr-remote
Router(config-isakmp-group)#
Step 2 key name
Example:
Router(config-isakmp-group)# key
secret-password
Router(config-isakmp-group)#
Step 3
dns primary-server
Example:
Router(config-isakmp-group)# dns 10.50.10.1
Router(config-isakmp-group)#
Step 4 domain name
Example:
Router(config-isakmp-group)# domain
company.com
Router(config-isakmp-group)#
Step 5
exit
Example:
Router(config-isakmp-group)# exit
Router(config)#
Step 6
ip local pool {default | poolname}
[low-ip-address [high-ip-address]]
Example:
Router(config)# ip local pool dynpool
30.30.30.20 30.30.30.30
Router(config)#
Cisco Secure Router 520 Series Software Configuration Guide
7-4
Chapter 7 Configuring VPNs Using an IPsec Tunnel and Generic Routing Encapsulation
Purpose
Creates an IKE policy group that contains
attributes to be downloaded to the remote client.
Also enters Internet Security Association Key
Management Protocol (ISAKMP) policy
configuration mode.
Specifies the IKE pre-shared key for the group
policy.
Specifies the primary Domain Name Service
(DNS) server for the group.
Note
Specifies group domain membership.
Exits IKE group policy configuration mode, and
enters global configuration mode.
Specifies a local address pool for the group.
For details about this command and additional
parameters that can be set, see the
Technologies Command
You may also want to specify Windows
Internet Naming Service (WINS) servers
for the group by using the wins command.
Reference.
Cisco IOS Dial
OL-14210-01