SECUR Exam Cram™ 2 (Exam 642-501)

Chapter 9. Configuring IPSec VPNs on Cisco Routers

Terms you'll need to understand:

• Internet Key Exchange (IKE) Phase 1

• IKE Phase 2

• Crypto access list

• Symmetrical access control lists (ACLs)

• Transforms

• Certificate authority (CA)

• Registration authority (RA)

• Root certificate

• Identity certificate

• RA certificate

• Certificate revocation list (CRL)

Techniques you'll need to master:

• Enabling IKE

• Configuring Internet Security Association and Key Management Protocol (ISAKMP) identity

• Configuring IKE Phase 1 security parameters

• Configuring preshared keys

• Configuring digital certificate support

• Configuring crypto ACLs

• Configuring IP Security (IPSec) security association (SA) lifetimes

• Configuring transform sets

• Configuring crypto maps

• Verifying IKE configuration

• Verifying ...