Cisco ASR 5000 Series 3G Home NodeB Administration Manual page 144

▀ Implementing IPSec for Mobile IP Applications
Step 4
Optional. Configure DPD for the FA to help prevent IPSec tunnel state mismatches between the FA and HA according
to the instructions located in the
Important:
availability.
Step 5
Configure the FA Service or the FA system according to the instructions located in the
Support IPSec
Step 6 Configure one or more transform sets for the HA system according to the instructions located in the
Configuration section of this chapter.
The transform set(s) must be configured in the same context as the HA service.
Step 7 Configure one or more ISAKMP policies or the HA system according to the instructions located in the
Configuration section of this chapter.
The ISAKMP policy(ies) must be configured in the same context as the HA service.
Step 8 Configure an ipsec-isakmp crypto map or the HA system according to the instructions located in the
Map Configuration
The crypto map(s) must be configured in the same context as the HA service.
Step 9 Optional. Configure DPD for the HA to help prevent IPSec tunnel state mismatches between the FA and HA according
to the instructions located in the
Important:
availability.
Step 10
Configure the HA Service or the HA system according to the instructions located in the section of this chapter.
Step 11
Configure the required attributes for RADIUS-based subscribers according to the information located in the
Attributes for IPSec-based Mobile IP Applications
Step 12
Save your configuration to flash memory, an external memory device, and/or a network location using the Exec mode
command
save configuration
System Administration Guide and the Command Line Interface Reference.
▄ Cisco ASR 5000 Series 3G Home NodeB Gateway Administration Guide
144
Dead Peer Detection (DPD) Configuration
Though the use of DPD is optional, it is recommended in order to ensure service
section of this chapter.
section of this chapter.
Dead Peer Detection (DPD) Configuration
Though the use of DPD is optional, it is recommended in order to ensure service
. For additional information on how to verify and save configuration files, refer to the
section of this chapter.
section of this chapter.
section of this chapter.
IP Security
FA Services Configuration to
Transform Set
ISAKMP Policy
Dynamic Crypto
RADIUS
OL-25069-03