Ilab 6

Student Name Date

SEC450 IPSec VPN Lab Report

NOTE: Use carriage returns and page breaks as needed to prevent table contents from extending across page boundaries.

Task 1—Verify Initial Connectivity and Configuration

• Verify connectivity by opening the Virtual CLI window for the ISP router. Ping all of the Dallas and Chicago Servers and Hosts by pinging their IP Addresses. Copy and paste these commands (not the Virtual CLI Windows) and output into the table cell below.

Paste the Virtual CLI Ping Commands here.

• Verify that there are VPN configured for this topology with View -> Visualize Protocol Configuration -> IP Tunnel Configuration. You should see a pop-up message indicating that no tunneling protocols are being used. Copy this window () and paste it into the table cell below.

Paste the Pop-up Message window here.

Task 2—Complete a Flow Analysis of the Network

No commands, data, or captures are required for this task.

Task 3—Configure a Site-to-Site IPSec VPN on the Dallas Router

Which IKE (isakmp) policy would have the highest priority—100 or 200?

What authentication options are available?

What encryption options are available?

What are the Diffie-Hellman group options available on most IOS Firewall routers?

What are the common hash algorithm options?

• After you have completed typing in the Dallas IPSec configuration commands, highlight the commands you typed in using your mouse (click and drag) or the keyboard ( + Arrow keys) use A to select all of the commands in the Dallas configuration file. Use C to put the commands in the clipboard. Use V to paste these commands into the table cell provided below.

Paste the Dallas Router Configuration here.

Task 4—Configure a Site-to-Site IPSec VPN on the Chicago Router

• After you have completed typing in the Chicago IPSec configuration commands, highlight the commands you typed in using your mouse (click and drag)...