ccna book list

ccna book list.8.5.3.4 Traffic to be ProtectedThe fourth task of the step-by-step wizard is to configure which traffic needs to be protected. To protect all traffic going from one 1P subnet to another, you need to perform the following steps. Step 1 In the TraffictoProtect window, check the Protect alltraffic between the following subnetsradio button. Step 2 Define the IP address and subnet mask of the local network from which the IPSec traffic originates. Step 3 Define the IP address and subnet mask of the remote network to which the IPSec traffic is destined.To specify a custom ACL (IPSec rule) that defines the type of traffic to be protected, perform the followingSteps. Step 1 In the TraffictoProtect window, click the Create/Select an access-list for IPSec traffic option. Step 2 Click the ellipsis (...) button to select an existing ACL or create a new ACL. Step 3 To use an existing ACL, select the Selectanexistingrule(ACL) option. To create a new ACL, selectCreate a new rule (ACL) and select the option. 8.5.3.5 Configuration SummaryWhen a new ACL is created to define the traffic to be protected, a window is displayed listing the access rule entries created. Step 1 Give the access rule a name and description. Step 2 Click the Add button to start adding rule entries.After you create a new ACL, you must specify the entry within the ACL. Step 1 Select an action from the Select an action list box and enter a description for the rule entry in the Description text box. Step 2 Define the source host or network in the SourceHost/Network panel and the destination host or network in the DestinationHost/Network panel.Destination host or network. Each rule entry defines a pair of source and destination addresses or networks. Ensure that you use wildcard bits instead of subnet mask bits in the WildcardMask field. Step 3 (Optional) To provide protection for a specific protocol, select the desired protocol radio button (TCP, UDP, or ICMP) and port number. If the IP protocol is selected, the rule is applied to all IP traffic. At the end of the configuration, the wizard will show a summary of the configured parameters. To modify the configuration, click the Back button. Click the Finish button to complete the configuration.8.5.4 Verifying, Monitoring VPN and VPN Troubleshooting