Monday, May 31, 2010

IPSEC VPN Tunnel Config

Been playing with this the last hour and thought I would share it.

I setup a VPN tunnel between R4 and R5

R4 fa0/0 is the inside of its network
s0/1/0 is the outside PPP link to R5

R5 fa0/0 is the inside of its network
s0/1/0 is the outside PPP link to R4

Here are the configs.

R4:

crypto isakmp policy 1
encr aes
authentication pre-share
group 5
crypto isakmp key CISCO address 10.1.1.2
!
crypto ipsec transform-set esp-aes-sha esp-aes esp-sha-hmac
!
crypto map vpn 10 ipsec-isakmp
set peer 10.1.1.2
set transform-set esp-aes-sha
match address 101
!
interface FastEthernet0/0
ip address 192.168.1.254 255.255.255.0
duplex auto
speed auto
no keepalive
!
interface Serial0/1/0
ip address 10.1.1.1 255.255.255.0
clock rate 64000
crypto map vpn
!
access-list 101 permit ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255


R5:

crypto isakmp policy 1
encr aes
authentication pre-share
group 5
crypto isakmp key CISCO address 10.1.1.1
!
crypto ipsec transform-set esp-aes-sha esp-aes esp-sha-hmac
!
crypto map vpn 10 ipsec-isakmp
set peer 10.1.1.1
set transform-set esp-aes-sha
match address 101
!
interface FastEthernet0/0
ip address 192.168.2.254 255.255.255.0
duplex auto
speed auto
!
interface Serial0/1/0
ip address 10.1.1.2 255.255.255.0
crypto map vpn
!
access-list 101 permit ip 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255
!

1 comment: