IPSec VPN Lab

Student Name

Date

SEC450 IPSec VPN Lab Report

NOTE: Use carriage returns and page breaks as needed to prevent table contents from extending across page boundaries.

Task 1—Configure a Site-to-Site IPSec VPN on the Dallas Router

Which IKE (isakmp) policy would have the highest priority—100 or 200?

What authentication options are available?

What encryption options are available?

What are the Diffie-Hellman group options available on most IOS Firewall routers?

What are the common hash algorithm options?

· After you have completed typing in the Dallas IPSec configuration commands, highlight the commands you typed in using your mouse (click and drag) or the keyboard (<Shift> + Arrow keys) use <Ctrl>A to select all of the commands in the Dallas configuration file. Use <Ctrl>C to put the commands in the clipboard. Use <Ctrl>V to paste these commands into the table cell provided below.

Paste the Dallas Router Configuration here.

Task 2—Configure a Site-to-Site IPSec VPN on the Chicago Router

· After you have completed typing in the Chicago IPSec configuration commands, highlight the commands you typed in using your mouse (click and drag) or the keyboard (<Shift> + Arrow keys) use <Ctrl>A to select all of the commands in the Chicago configuration file. Use <Ctrl>C to put the commands in the clipboard. Use <Ctrl>V to paste these commands into the table cell provided in the lab report document. Paste the Chicago Router Configuration here.

What commands did you type in that specified the packets to be encrypted??