IPSec Site to Site VPN tunnels

This demo walks through the purpose and workings of an IPSec VPN tunnel, including implementation and verification of the tunnel.

Enjoy!

Category:

Education

Tags:

• IPSec
• site-to-site
• tunnel
• cisco
• ccna
• ccent
• security

[TheCorruptedFiles]

ok, me just one more time :D ....can you tell me where did you installed wireshack (i see linux but i dont know how :D ) and how did you captured (sniff) packets from router R2 interface ?? Tnx a lot, really...

[Keith6783]

@TheCorruptedFiles

With wireshark, it is just a standard install. In the setting of GNS3, it will ask you where you installed it, which lets you browse and identify where wireshark is installed.

For the capturing, in GNS3, right click on a link between two devices, and one of the options will be to capture the data. Remember to right click again later, to tell it to stop.

Best wishes,

Keith

[cyberpsych1]

I like the way you present, but you didn't share the ISP config. Is there a parameter we're not seeing that's beneficial if I wanted to mimic your lab in my environment? I've noticed even in a "3 router config" in gns3 my tunnels won't come up "unless" is use the "Ip host x.x.x.x host x.x.x.x" but that's no doing it right. I can do this on cisco hardware but not in gns3. Could you do "3 router ipsec tunnel" vid in gns3?

[Keith6783]

@cyberpsych1

For your ISP config, use the commands:

router ospf 1

network 0.0.0.0 255.255.255.255 area 0

end

This will allow all the routers on the ISP side, know all the "global" addresses in your lab. Your edge routers should have a default route, that uses the IP address of the nearest ISP router as the default route's next hop. That is all there is to it.

Let me know if that is helpful for you.

Cheers,

Keith

[vijay85cisco]

HI Mr.keith...Your video lecture is splendid , awesome...its worth watching for the beginners...

do u have any kind if ipsec troubleshooting video lectures ?

Nandri mr. keith...

[Keith6783]

@vijay85cisco

I don't have any troubleshooting videos on IPsec, but I think its a great idea. I will add that to my list.

Best wishes,

Keith

[ucha19871]

Brilliant video tutorial, love it

[gkprasad100]

very good tutorial..thanks!

[brunobliss]

seriously need to get ccna fast

[TheCorruptedFiles]

after 3 days i finally made it :) ! one more time...great vid bro !!!!!

[TheCorruptedFiles]

great vid bro, i love it and it helps me a lot...one question: where i can find Cisco TripleDES Cryptographic Software for 12.2 IOS 2600 cisco router, cuz i cant perform this in gns 3, im bloked on first step (crypto isakamp policy 1) :( ... ? tnx