ccna book in nepal

ccna book in nepal.[seq-num]In encrypted map configuration mode, you can configure multiple IPSec components, including which encryption ACL to use, peer addresses, and transformation sets. ACLs marked as IPSec manual (IPSec-manual) in an encryption map entry are restricted to only one permit entry, and subsequent entries are ignored. SAs created by this encryption mapping entry are used for only one type of data flow. To support multiple manually created SAs for different types of traffic, multiple encryption ACLs are defined and each one is applied to a separate IPSec-manual encryption mapping entry. Each ACL contains a permit statement that defines the traffic it must protect.-Two peers can be specified in an encrypted mapping to provide redundancy. If the first peer cannot be contacted, the second peer is used. There is no limit to the number of redundant peers that can be configured.8.4.6.3 Applying Cryptographic MappingsAfter configuring the cryptomap parameters, use the interface configuration mode command cryptomap to assign the cryptomap to the interface. This activates the IPSec policy.In interface configuration mode, use the command crypto map to apply the cryptomap to the outgoing interface of the VPN tunnel.crypto map map-namemap-name is the name of the encryption mapping set to be applied to the interface.Confirm that you also configure the routing information required to send packets into the tunnel.All 1P traffic passing through an interface to which an encrypted map is applied is judged by the encrypted map set. If an encrypted mapping entry sees outbound [ P traffic that should be protected and the encrypted mapping specifies the use of IKE,an SAo will be negotiated with the remote peer based on the parameters included in the encrypted mapping entry