
VMware, Inc. 137
Appendix B vShield Edge VPN Configuration Examples
4 Double]clicktheRemoteSiteSubnetcellandentertheIPaddressinCIDRformat(A.B.C.D/M).
5 Double]clicktheEncryptioncellandselecttheappropriateencryptiontype.
6ClickCommit.
Next,enableVPNservice.
To enable VPN service on a vShield Edge
1InthevSphereClient,gotoInventory>Networking.
2 SelectaninternalportgroupthatisprotectedbyavShieldEdge.
3Click
thevShieldEdgetab.
4ClicktheStatuslink.
5UnderEdgeServices,selectVPNandclickStarttostarttheservice.
6Iftheservicehasbeenstartedbutisnotresponding,clickRefresh Statustosendasynchronizationrequest
fromthevShieldManager.tothevShieldEdge.
Using a Cisco 2821 Integrated Services Router
ThefollowingconfigurationswereperformedbyusingCiscoIOS.
Configure Interfaces and Default Route
interface GigabitEthernet0/0
ip address 10.24.120.90 255.255.252.0
duplex auto
speed auto
crypto map MYVPN
!
interface GigabitEthernet0/1
ip address 172.16.0.1 255.255.0.0
duplex auto
speed auto
!
ip route 0.0.0.0 0.0.0.0 10.24.123.253
Configure IKE Policy
Router# config term
Router(config)# crypto isakmp policy 1
Router(config-isakmp)# encryption 3des
Router(config-isakmp)# group 2
Router(config-isakmp)# hash sha
Router(config-isakmp)# lifetime 28800
Commentaires sur ces manuels