CCIE Security Practice Labs

Section 5.0: IPSec Configuration (10 points)

5.1. IPSec LAN-to-LAN Router-to-Router (5 points)

1. Configure IPSec LAN-to-LAN between R5 and R6 for Loopback5 networks.

2. Configure a 56-bit encryption algorithm and no authentication.

3. Configure cisco as the preshared key.

4. Do not configure the set peer statement on R6.

5. Do not use an IPSec dynamic map on R5.

6. Configure a static route for Loopback5 on both ends.

5.2. L2TP over IPSec Using Certificates (5 points)

1. Configure L2TP over IPSec between PIX and Windows 2000 Test PC in VLAN-4 using certificates.

2. Obtain certificate(s) on PIX and Test PC from CA server 172.16.1.5 in VLAN-2.

3. Test PC in VLAN-4 is running Windows 2000 native IPSec/L2TP client to establish an encrypted L2TP tunnel to the PIX firewall.

4. Configure ...