|
Home > Archive > CCNP > April 2002 > 2611 router with Security Bundle
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
2611 router with Security Bundle
|
|
|
| I need to set up a 2611 router at my fathers company. He had a T1 line installed this week and i need to configure it with the cdu/dsu module. The router also has a vpn module and a security bundle. I wont have a problem with basic configuration, but i have never configured a router with the security bundle or a vpn module. I have configured frame relay on a router and basic routes between two networks.(Three including the internet.) If someone could help me out with the vpn and the security bundle, and maybe somethings to look out for regarding the t1 line, it would be greatly appreciated.
Thanks again
Suzyq | |
| MadChef 2002-04-19, 8:36 am |
| I believe that the VPN accelerator will automagically offload 3DES processing, so I don't think you have anything special to support it, but I could be wrong. The more complicated thing will be setting up VPN access to the router. Doing this with IOS is a pain and requires a pretty good understanding of IPSec. You'll want to download the new VPN unity client from cisco.com as the client piece.
Start here: http://www.cisco.com/cgi-bin/Suppor...etworking:IPSec
and check out the configuration section as it pertains to router-to-vpn client configuration.
For IOS firewall configuration, see:
http://www.cisco.com/univercd/cc/td...w2/iosfw2_2.htm
As for bringing up the T1, this is very simple if the telco has built it out properly. If this if a fractional T1, you'll need to specify the channels to be used with the "service module t1 timeslots 1-12" or whatever channels you're using.
Linecoding and framing are default set to b8zs and ESF which are the standards for north america. An interface status of down/down means you're receiving no carrier, so the line is likely looped or shut down on the telco side. You'll have to get them to bring it up. up/down means you have carrier, but no keepalives. If you see this you're likely not using the appropriate channels. There's a thousand other things that could go on, but those are the ones I expect you are mostly likely to see.
Good luck.
MadChef |
|
|
|
|