| 6.4 |  | Site-to-Site IPSec VPN Using Pre-shared Keys |
| 6.4.4 |  | Task 3 - configure IPSec |

| This section presents the steps used to configure IPSec. Subsequent sections of this module discuss each configuration step in detail. The general tasks and commands used to configure IPSec encryption on routers are summarized as follows :

1. Configure transform set suites with the crypto IPSec transform-set command.
2. Configure global IPSec security association lifetimes with the c rypto IPSec security-association lifetime command.
3. Configure crypto ACLs with the access-list command.
4. Configure crypto maps with the crypto map command.
5. Apply the crypto maps to the terminating/originating interface with the interface and crypto map commands.

Examples for RouterA and RouterB are shown in Figure . The examples are concatenated to only show commands that will be used to configure IPSec .

| Media Activity Demonstration Activity: Configuring IPSec In this activity, students will learn how to configure transform set suites.

| Media Activity Demonstration Activity: Configure IPSec In this activity, drag and drop the boxes to the appropriate step to configure IPSec.