Cisco Cisco IOS Software Release 12.3(11)T
R E V I E W D R A F T — C I S C O C O N F I D E N T I A L
L2TP—IPSec Support for NAT and PAT Windows Clients
How to Enable L2TP—IPSec Support for NAT and PAT Windows Clients
5
Cisco IOS Release 12.3(11)T4 and Release 12.4(1)
4.
set nat demux
5.
exit
6.
exit
7.
show crypto map [interface interface | tag map-name]
or
show crypto dynamic-map [tag map-name]
8.
show crypto ipsec sa
DETAILED STEPS
Command or Action
Purpose
Step 1
enable
Example:
Router> enable
Enables privileged EXEC mode.
•
Enter your password if prompted.
Step 2
configure
terminal
Example:
Router# configure terminal
Enters global configuration mode.
Step 3
crypto map
map-name seq-num [ipsec-isakmp]
Example:
Router(config)# crypto map STATIC_MAP 5
or
crypto dynamic-map
dynamic-map-name
dynamic-seq-num
Example:
Router(config)# crypto dynamic-map DYNAMIC_MAP
10
Names the static crypto map entry to create (or modify) and
enters crypto map configuration mode.
enters crypto map configuration mode.
or
Names the dynamic crypto map entry to create (or modify)
and enters crypto map configuration mode.
and enters crypto map configuration mode.
Step 4
set nat demux
Example:
Router(config-crypto-map)# set nat demux
Enables L2TP—IPSec support.
Step 5
exit
Example:
Router(config-crypto-map)# exit
Exits crypto map configuration mode and returns to global
configuration mode.
configuration mode.
Step 6
exit
Example:
Router(config)# exit
Exits global configuration mode and returns to privileged
EXEC mode.
EXEC mode.