Cisco Systems C7200 User Manual

Corporate HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706 USAhttp://www.cisco.comTel: 408 526-4000800 553-NETS (6387)Fax:

xC7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02PrefaceDocumentation FeedbackYou can access the Cisco website at this

xiC7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02PrefaceProduct Alerts and Field NoticesA current list of security adv

xiiC7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02PrefaceObtaining Technical AssistanceTo access the Product Alert Too

xiiiC7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02PrefaceObtaining Additional Publications and InformationSubmitting

xivC7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02PrefaceObtaining Additional Publications and Information• The Cisco

CHAPTER 1-1C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-021OverviewThis chapter describes the C7200 VSA (VPN Services

1-2C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 1 OverviewVSA Overview• IKE—Internet Key Exchange (IKE)

1-3C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 1 OverviewVSA OverviewNote The C7200 VSA is only suppor

1-4C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 1 OverviewHardware RequiredThe VSA provides hardware-ac

1-5C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 1 OverviewSupported Standards, MIBs, and RFCsPerformanc

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOM

1-6C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 1 OverviewEnabling/Disabling the VSAEnabling/Disabling

1-7C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 1 OverviewLEDsLEDsThe VSA has one LED, as shown in Figu

1-8C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 1 OverviewConnectorsFigure 1-3 VSA LEDThe following con

1-9C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 1 OverviewSlot LocationsFigure 1-4 Cisco 7204VXR Router

1-10C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 1 OverviewSlot LocationsCisco 7206VXR RouterThe VSA is

CHAPTER 2-1C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-022Preparing for InstallationThis chapter describes the genera

2-2C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 2 Preparing for InstallationHardware and Software Requi

2-3C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 2 Preparing for InstallationOnline Insertion and Remova

2-4C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 2 Preparing for InstallationSafety Guidelineshazardous

2-5C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 2 Preparing for InstallationCompliance with U.S. Export

iiiC7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02CONTENTSPreface viiAudience viiWarnings viiObjectives viiiOrganizat

2-6C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 2 Preparing for InstallationCompliance with U.S. Export

CHAPTER 3-1C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-023Removing and Installing the VSAThis chapter describes how t

3-2C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 3 Removing and Installing the VSAOnline Insertion and R

3-3C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 3 Removing and Installing the VSAVSA Removal and Instal

3-4C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 3 Removing and Installing the VSAVSA Removal and Instal

CHAPTER 4-1C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-024Configuring the VSAThis chapter contains the information an

4-2C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 4 Configuring the VSAConfiguration Tasks• Disabling VSA

4-3C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 4 Configuring the VSAConfiguration TasksTo configure an

4-4C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 4 Configuring the VSAConfiguration TasksFor detailed in

4-5C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 4 Configuring the VSAConfiguration Tasks• Selecting App

ContentsivC7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Disabling the VSA during Operation 1 - 6Enabling/Disabling S

4-6C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 4 Configuring the VSAConfiguration TasksTable 4-1shows

4-7C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 4 Configuring the VSAConfiguration TasksIPSec Protocols

4-8C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 4 Configuring the VSAConfiguration TasksChanging Existi

4-9C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 4 Configuring the VSAConfiguration TasksTo change a glo

4-10C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 4 Configuring the VSAConfiguration TasksCreating Crypt

4-11C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 4 Configuring the VSAConfiguration TasksTo create cryp

4-12C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 4 Configuring the VSAConfiguration TasksCreating Dynam

4-13C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 4 Configuring the VSAConfiguration TasksStep 3Router(c

4-14C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 4 Configuring the VSAConfiguration TasksTo add a dynam

4-15C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 4 Configuring the VSAConfiguration TasksTo view inform

ContentsvC7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Changing Existing Transforms 4 - 8Transform Example 4 - 8Conf

4-16C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 4 Configuring the VSAConfiguration TasksVerifying the

4-17C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 4 Configuring the VSAConfiguration Tasks remote iden

4-18C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 4 Configuring the VSAConfiguration ExamplesConfigurati

4-19C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 4 Configuring the VSABasic IPSec Configuration Illustr

4-20C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 4 Configuring the VSABasic IPSec Configuration Illustr

4-21C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 4 Configuring the VSATroubleshooting TipsA crypto map

4-22C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 4 Configuring the VSATroubleshooting Tips Decrypted

4-23C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 4 Configuring the VSAMonitoring and Maintaining the VS

4-24C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02Chapter 4 Configuring the VSAMonitoring and Maintaining the VS

IN-1C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02INDEXAacceleration module, VPN (see VAM) 1 - 1access-list (encrypt

ContentsviC7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02

IndexIN-2C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02IIKEconfiguring1 - 6, 4 - 2configuring policies example 4 - 1

IndexIN-3C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02requirements 2 - 2software and hardware compatability ix, 2 -

IndexIN-4C7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02

viiC7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02PrefaceThis preface describes the objectives and organization of th

viiiC7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02PrefaceObjectivesWarningIMPORTANT SAFETY INSTRUCTIONSThis warning s

ixC7200 VSA (VPN Services Adapter) Installation and Configuration GuideOL-9129-02PrefaceRelated DocumentationRelated DocumentationThis section lists d