Chapter 10. Configuring VPN
Internet Security Router User
’s Manual
102
5.
Save the configuration.
10.6.2.2 Configure VPN Rules on ISR1
Step 1: Configure VPN Rule
Refer to the section 10.3 Establish VPN Connection Using Automatic Keying to configure VPN policies on
ISR1 using automatic keying with the following addresses:
1.
Use 192.168.11.0/255.255.255.0 for the Local Secure Group
2.
Use 192.168.12.0/255.255.255.0 for the Remote Secure Group
Figure 10.8. Extranet Example
–VPN Policy Configuration on ISR1
Step 2: Configure Static NAT Pools
1.
Configure outgoing static NAT pool (static-NAT) for translating addresses in range 192.168.1.1-
192.168.1.254 to 192.168.11. 1-192.168.11.254