CCIE Security Practice Labs

Section 5.0: IPSec/PPTP Configuration (10 points)

5.1. IPSec LAN-to-LAN Router-to-PIX (4 points)

1. Configure IPSec LAN-to-LAN between R6 and PIX for VLAN5 and VLAN2 networks, respectively.

2. Configure preshared with all other parameters accordingly.

3. Configure a static route for network 10.1.1.0/24 if required.

5.2. IPSec Remote Access to Router (3 points)

1. Configure Remote Access VPN client to R5 for Test PC in VLAN9.

2. Configure MD5 hashing and Diffie Hellman group 2.

3. Configure group 3000client with password cisco123.

4. Configure client authentication using local username cisco password cisco.

5. Configure the VPN client to receive IP addresses in the range 172.16.1.1–172.16.1.10 and DNS server IP 164.15.7.100 and WINS server IP 164.15.7.200 from the router. ...