Task 11Test and Verify IPsec CA Configuration

After completing the configuration of the IPsec VPN, you want to test the connection and verify that it is functioning correctly before placing that connection into production. There are several methods for testing the connection. Of course, the most direct method is to pass traffic through the VPN tunnel and verify that it reaches the final destination. In this case, take a more thorough approach and look at each individual component of the configuration, verifying each item individually. This task consists of 10 individual subtasks:

• Display transform sets .

• Display your configured crypto maps .

• Display the current state of IPsec SAs .

• Enable debug output for IPsec events .

• Enable debug output for ISAKMP events .

• Observe the IKE and IPsec debug outputs .

• Ensure encryption is working.

0 0

Post a comment