Corporate Headquarters

Command
Purpose
Step 1
hq-sanjose(config)#
interface serial 2/0
Specify a physical interface on which to apply the crypto 
map and enter interface configuration mode. This example 
specifies serial interface 2/0 on the headquarters router.
Step 2
hq-sanjose(config-if)#
crypto map s4second
Apply the crypto map set to the physical interface. This 
example configures crypto map s4second, which was 
created in the 
.
Step 3
hq-sanjose(config-if)#
exit
hq-sanjose(config)#
Exit back to global configuration mode.
Step 4
hq-sanjose#
clear crypto sa
In privileged EXEC mode, clear the existing IPSec SAs so 
that any changes are used immediately. (Manually 
established SAs are reestablished immediately.)
Note
Using the 
clear crypto sa
command without 
parameters clears out the full SA database, which 
clears out active security sessions. You may also 
specify the 
peer
, 
map
, or 
entry
keywords to clear 
out only a subset of the SA database. 

---

3-28
Cisco IOS VPN Configuration Guide
OL-8336-01
Chapter 3 Site-to-Site and Extranet VPN Business Scenarios
Step 4—Configuring Quality of Service
Verifying Crypto Map Interface Associations
To verify the configuration:
•
Enter the
 show crypto map interface serial 2/0 
EXEC command to see the crypto maps applied to 
a specific interface.
hq-sanjose# 
show crypto map interface serial 2/0
Crypto Map "s4second" 2 ipsec-isakmp
Peer = 172.23.2.7
Extended IP access list 111
access-list 111 permit ip host 10.2.2.2 host 10.1.5.3
Current peer:172.23.2.7
Security association lifetime:4608000 kilobytes/1000 seconds
PFS (Y/N):N
Transform sets={ proposal4, }