Ip Security - Cisco ASR 5000 Series 3G Home NodeB Administration Manual

Appendix C

IP Security

This chapter provides information on configuring an enhanced or extended service. The product Administration Guides
provide examples and procedures for configuration of basic services on the system. It is recommended that you select
the configuration example that best meets your service model, and configure the required elements for that model, as
described in the respective product Administration Guide, before using the procedures in this chapter.
Important:
Cisco account representative for detailed information on specific licensing requirements. For information on installing
and verifying licenses, refer to the Managing License Keys section of the Software Management Operations chapter in
the System Administration Guide.
Caution:
releases.
This chapter contains the following sections:

Overview

IPSec Terminology

Implementing IPSec for PDN Access Applications

Implementing IPSec for Mobile IP Applications

Implementing IPSec for L2TP Applications

Transform Set Configuration

ISAKMP Policy Configuration

ISAKMP Crypto Map Configuration

Dynamic Crypto Map Configuration

Manual Crypto Map Configuration

Crypto Map and Interface Association

FA Services Configuration to Support IPSec

HA Service Configuration to Support IPSec

RADIUS Attributes for IPSec-based Mobile IP Applications

LAC Service Configuration to Support IPSec

Subscriber Attributes for L2TP Application IPSec Support

PDSN Service Configuration for L2TP Support

Redundant IPSec Tunnel Fail-Over

Redundant IPSec Tunnel Fail-over Configuration

Dead Peer Detection (DPD) Configuration
OL-25069-03
The IP Security is a licensed Cisco feature. A separate feature license may be required. Contact your
IPSec parameter configurations saved using this release may not function properly with older software
Cisco ASR 5000 Series 3G Home NodeB Gateway Administration Guide ▄
129