Site Tools


cisco:labs:ios-xe:lab18

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

cisco:labs:ios-xe:lab18 [2025/10/04 21:18] – created Namecisco:labs:ios-xe:lab18 [2025/10/04 21:38] (current) Name
Line 6: Line 6:
  
 ====Task Instructions for r2 and r3:==== ====Task Instructions for r2 and r3:====
-  - Configure an ACL to define which traffic to encrypt using the physical interfaces. +  - Remove interface crypto map from interfaces. 
-  - Configure IKEv2 proposal.+  - Configure Tunnel 0 using the IP of Loopback 0.
   - Configure IKEv2 policy.   - Configure IKEv2 policy.
   - Configure IKEv2 keyring.   - Configure IKEv2 keyring.
Line 23: Line 23:
 ===Task 1=== ===Task 1===
 r2 r2
-<code>ip access-list extended castle-acl +<code>r2(config)#int g 2 
- 10 remark Permit statements equal traffic that shall be encrypted+r2(config-if)#no crypto map 
- 10 permit ip host 23.1.1.2 host 23.1.1.3</code>+r2(config-if)# 
 +*Oct  4 21:14:46.484: (ipsec_license_release) IPSEC License handle release failed (20) 
 +r2(config-if)#do show r 
 +*Oct  4 21:14:46.563: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF 
 +r2(config-if)#do show run int g 2 
 +Building configuration... 
 + 
 +Current configuration : 117 bytes 
 +
 +interface GigabitEthernet2 
 + ip address 23.1.1.2 255.255.255.
 + negotiation auto 
 + no mop enabled 
 + no mop sysid 
 +end</code>
 r3 r3
-<code>ip access-list extended castle-acl +<code>r3(config)#int g 2 
- 10 remark Permit statements equal traffic that shall be encrypted+r3(config-if)#  no crypto map 
- 10 permit ip host 23.1.1.3 host 23.1.1.2</code>+r3(config-if)# 
 +*Oct  4 21:15:07.044: (ipsec_license_release) IPSEC License handle release failed (20) 
 +r3(config-if)# 
 +*Oct  4 21:15:07.139: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF 
 +r3(config-if)#do show run int g 2 
 +Building configuration... 
 + 
 +Current configuration : 117 bytes 
 +
 +interface GigabitEthernet2 
 + ip address 23.1.1.3 255.255.255.
 + negotiation auto 
 + no mop enabled 
 + no mop sysid 
 +end</code>
 ---- ----
 ===Task 2=== ===Task 2===
cisco/labs/ios-xe/lab18.txt · Last modified: by Name