|
Router -
Cisco Router
|
|
Wednesday, 18 August 2010 17:19 |
|
Below shows the configuration for one side of a Site to Site VPN between 2 Cisco routers using pre-shared keys. router(config)# crypto isakmp enable router(config)# crypto isakmp policy 10
router(config-isakmp)# authenticaton pre-share
router(config-isakmp)# encryption [?]
router(config-isakmp)# group [?]
router(config-isakmp)# hash [?]
router(config-isakmp)# lifetime 86400
router(config)# crypto isakmp identity address
router(config)# cryption isakmp [key] address [peer ip] router(config)# crypto ipsec transform-set [name] [?]
router(config)# crypto ipsec lifetime [seconds/kilobytes] [value]
router(config)# ip access-list extended S2S-VPN-TRAFFIC
router(config-ext-nacl)# permit ip [local network] [mask] [remote network] [mask]
router(config)# crypto map S2S-VPN-MAP 100 ipsec-isakmp
router(config-crypto-map)# match address S2S-VPN-TRAFFIC
router(config-crypto-map)# set peer [peer ip]
router(config-crypto-map)# set transform-set [set]
router(config)# int [int name]
router(config-if)# crypto map S2S-VPN-MAP 100
|
