Paris(config-crypto-map)#set transform-set TGSET
Paris(config-crypto-map)#set peer 10.1.1.2 Paris(config)#crypto map TGMAP 1 ipsec-isakmp Paris(config)#crypto ipsec transform-set TGSET esp-aes esp-sha-hmac Paris(config-isakmp)#crypto isakmp key TimiGate address 10.1.1.2 (The public IP address of Paris router) Paris(config-isakmp)#authentication pre-share Paris(config)#ip access-list extended VPN Remember, this IP must be reachable from the Mumbai router. Now, repeat the process on the Paris router, making sure the IP address of the peer router matches the public IP address configured on the Paris router. Mumbai(config-crypto-map)#match address VPNįinally, on the Mumbai router, we MUST apply the crypto map to the interface connecting to the ISP. Mumbai(config-crypto-map)#set transform-set TGSET Mumbai(config-crypto-map)#set peer 20.1.1.2 Mumbai(config)#crypto map TGMAP 1 ipsec-isakmp Mumbai(config)#crypto ipsec transform-set TGSET esp-aes esp-sha-hmac Mumbai(config-isakmp)#crypto isakmp key TimiGate address 20.1.1.2 (The public IP address of Paris router) Mumbai(config-isakmp)#authentication pre-share The key must be the same on both routers.
Authentication mode is pre-share key (TimiGate). Now, configure IPsec VPN to use the access-list named VPN. Mumbai(config)#ip access-list extended VPN First of all, set up an access-list to match the traffics to be allowed through the VPN tunnel. Next, is VPN configuration on the Mumbai router.
Paris(config-if)#desc connection to Internet Mumbai(config-if)#desc connection to Internet Internet(config-if)#desc connection to Paris Internet(config-if)#desc connection to Mumbai You may also like: Connecting branch offices to the HQ using GRE tunnels On Internet router
0 kommentar(er)
