User Manual

34
Cisco Connected Grid 3G Module Installation and Configuration Guide
OL-25991-01
Configuration Example
crypto key param rsa label IPSEC_IDENTITY_BLUE modulus 2048 exportable
crypto ca trustpoint IPSEC_IDENTITY_BLUE
rsakeypair IPSEC_IDENTITY_BLUE 2048
revocation-check none
class-map type qos match-all ignore
match precedence 0
class-map type qos match-all packet
match packet length 1500
class-map type qos match-all critical
match dscp 46
class-map type qos match-all matchall
match precedence 1
match dscp 10
class-map type qos match-any matchany
match dscp 10,26
class-map type qos match-all priority
match precedence 3
policy-map type qos ignore
class ignore
set dscp 1
policy-map type qos packet
class packet
set precedence 5
policy-map type qos critical
class critical
set dscp 10
policy-map type qos matchall
class matchall
set precedence 5
policy-map type qos matchany
class matchany
set dscp 46
policy-map type qos priority
class priority
set dscp 46
priority level 3
copp profile strict
snmp-server user admin auth md5 0x5f66c5f7cde8de86eecb2008de9126f8 priv 0x5f66c5
f7cde8de86eecb2008de9126f8 localizedkey engineID 128:0:0:9:3:0:34:189:224:46:129
rmon event 1 log trap public description FATAL(1) owner PMON@FATAL
rmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL
rmon event 3 log trap public description ERROR(3) owner PMON@ERROR
rmon event 4 log trap public description WARNING(4) owner PMON@WARNING
rmon event 5 log trap public description INFORMATION(5) owner PMON@INFO
vrf context test
vrf context management
crypto ipsec profile MyProfile
set transform-set MyTransformSet
set pfs group1
set security-association lifetime seconds 120
set security-association lifetime kilobytes 2560
crypto ipsec transform-set MyTransformSet esp-gcm 256
vlan 1
no ip dhcp relay
interface Tunnel0
ip address 4.0.0.1/24
tunnel mode ipsec ipv4
tunnel source cellular3/1
tunnel destination 192.168.168.2
tunnel protection ipsec profile MyProfile
no shutdown