Corporate Headquarters

•
Configuring IKE Policies
•
Verifying IKE Policies
•
Configuring IPSec and IPSec Tunnel Mode
•
Configuring Crypto Maps
Note
You can configure a static crypto map, create a dynamic crypto map, or add a dynamic crypto map into 
a static crypto map. Refer to the 
“Configuring Crypto Maps” section on page 3-24
.
Optionally, you can configure CA interoperability. This guide does not explain how to configure CA 
interoperability on your Cisco 7200 series router. Refer to the “IP Security and Encryption” part of the 
Security Configuration Guide
and the 
Cisco IOS Security Command Reference
publication for detailed 
information on configuring CA interoperabilty. See 
“Related Documentation” section on page xi
for 
additional information on how to access these publications.
Note
This section only contains basic configuration information for enabling encryption and IPSec tunneling 
services. Refer to the “IP Security and Encryption” part of the Cisco IOS 
Security Configuration 
Guide
and the 
Security Command Reference
publications for detailed configuration information on 
IPSec, IKE, and CA. See 
“Related Documentation” section on page xi
 for information on how to access 
these publications. 
Refer to the 
Integrated Service Adapter and Integrated Service Module Installation and Configuration
publication for detailed configuration information on the ISM.

---

3-15
Cisco IOS VPN Configuration Guide
OL-8336-01
Chapter 3 Site-to-Site and Extranet VPN Business Scenarios
Step 3—Configuring Encryption and IPSec
This section contains the following topics: