| 6.6 |  | Configure Site-to-Site IPSec VPN using Digital Certificates |
| 6.6.5 |  | Task 4 - configure IPSec |

| The fourth task in configuring Cisco IOS IPSec is to configure the IPSec parameters that were previously gathered. This section presents the steps used to configure IPSec. The general steps and commands used to configure IPSec encryption on Cisco routers are summarized as follows:

1. Configure transform set suites with the crypto IPSec transform-set command.
2. Configure global IPSec security association lifetimes with the crypto IPSec security-association lifetime command.
3. Configure crypto access lists with the access-list command.

The rest of the steps used to configure IPSec parameters for IKE RSA signature keys are as follows:

1. Configure crypto maps with the c rypto map command.
2. Apply the crypto maps to the terminating or originating interface with the interface and the crypto map commands.

| Lab Activity e-Lab Activity: Configure IPSec In this activity, students will learn how to use the general tasks and commands to configure IPSec encryption on Cisco routers.