HP 7000 dl Router Series Guide de l'utilisateur télécharger pdf (Page 662)

100

101

SROS Command Line Interface Reference Guide ATM Sub-Interface Config Command Set

crypto map <mapname>

Use the crypto map command to associate crypto maps with the interface.

Syntax Description

<mapname> Enter the crypto map name that you wish to assign to the interface.

Default Values

By default, no crypto maps are assigned to an interface.

Command Modes

(config-interface)# Interface Configuration Mode

Valid interfaces include: ATM sub-interface, Ethernet, virtual PPP interfaces,

virtual Frame Relay sub-interfaces, and loopback interfaces

Functional Notes

When configuring a system to use both the stateful inspection firewall and IKE negotiation for VPN, keep

the following notes in mind.

When defining the policy-class and associated access-control lists (ACLs) that describe the behavior of the

firewall, do not forget to include the traffic coming into the system over a VPN tunnel terminated by the

system. The firewall should be set up with respect to the un-encrypted traffic that is destined to be sent or

received over the VPN tunnel. The following diagram represents typical Secure Router OS data-flow logic.

Note

When you apply a map to an interface, you are applying all crypto maps with the given map

name. This allows you to apply multiple crypto maps if you have created maps which share

the same name but have different map index numbers.

Note

VPN Configuration Guide ProCurve SROS Documentation CD

1 2 ... 657 658 659 660 661 662 663 664 665 666 667 ... 940 941

Commentaires sur ces manuels

Pas de commentaire

HP 7000 dl Router Series Guide de l'utilisateur Page 662

Commentaires sur ces manuels

Produits connexes et manuels pour Mise en réseau HP 7000 dl Router Series