IPSEC VPN: Configuring and Verifying

Continuation of IPSEC VPN series. In this video I demonstrate how to configure IPSEC VPN between two IOS routers.

!!!!!!!!!!!!!!!!!!NORMAN!!!!!!!!!!!!!!!!!!!!!!!!!!

ip access-list extended NormanToGainesville
permit ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255

crypto isakmp policy 1
authentication pre-share

crypto isakmp key champions address 10.1.1.2

crypto ipsec transform-set 3DESHMAC esp-3des esp-sha-hmac

crypto map TOFLORIDA 1 ipsec-isakmp
set peer 10.1.1.2
set transform-set TRANSFORM1
match address NormanToGainesville


interface FastEthernet0/0
crypto map TOFLORIDA


!!!!!!!!!!!!!!!!!!GAINESVILLE!!!!!!!!!!!!!!!!!!!!!!!!!!

ip access-list extended GainesvilleToNorman
permit ip 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255

crypto isakmp policy 1
authentication pre-share
crypto isakmp key champions address 10.1.1.1

crypto ipsec transform-set 3DESHMAC esp-3des esp-sha-hmac

crypto map TOOKLAHOMA 1 ipsec-isakmp
set peer 10.1.1.1
set transform-set 3DESHMAC
match address GainesvilleToNorman

interface FastEthernet0/0
crypto map TOOKLAHOMA

Category:

Education

Tags:

• IPSEC
• VPN
• IOS
• Cisco
• Configuring
• CCNP

[emixiak]

Thanks for that tutorial. You didn't tell to which interface the crypto map was assigned to. Was it the interface between the routers or on the local side?

[gamorm]

@emixiak Apply to the outgoing interface. Look at it this way: apply to the interface closest to your target.

[sulemantajik]

great vpn tutorial..the ping source n destination concept helped me out..loopback used as network..new concept for me..Thanks..gud work

[malikuchi]

Thanks. I have seen this video 3 times now. I review the video every time i have to create a vpn. Very helpful video.

[MrAndykab]

Take your career to the Security IaaS paradise and protect networks ASA/PIX. Seeking Level 2 and Level 3 Network Security Administators and Engineers. Permanent, full benies, relocation, paid cert training and TIer 1 level IT Technology company. Email contact info or resume to andy.kabbe@modis.com and I can get you straight into hiring managers hands anxious to hire now. Email: andy.kabbe@modis.com

[moondz]

HI Gayes :

About the routing you have just to use a the default route routing between router NORMAN and GAINESVILLE.

Regards

Sofiane

[samawatif]

Cheers for this man...much appreciated :-)

[surya8180]

Nice one

[mdtaherk]

excellent explaination

[TheAvidy]

Thank you 'twas very helpful...