Wednesday, August 21, 2013

IPSec Site-to-Site VPN



Step by step create the following...

  1. ISAKMP tunnel (IKE Phase 1) included: Hashing + Authentication + Diffie Hellman Group
  2. IPSec tunnel (IKE Phase 2) included: Encryption + Lifetime 
  3. Access-list to permit (Interesting traffic)
  4. crypto map 
  5. apply to interface


After all this configuration

R1# ping 10.0.1.1 source lo0 (!!!must be successful)

R2# ping 192.168.1.1 source lo0 (!!!must be successful)

>>>>>>>>>>>>>>>>>>>>>>>>>>>><<<<<<<<<<<<<<<<<<<<<<<<<<<

Hashing           = MD5 / SHA
Authentication  = pre-shared key / certificate
Diffie Hellman  = Diffie Hellman Group 1 (or) 2 (or) 5
Encryption       = DES / 3DES / AES 128 / AES 256 (AES 256 is recommended)

>>>>>>>>>>>>>>>>>>>>>>>>>>>><<<<<<<<<<<<<<<<<<<<<<<<<<<






No comments:

Post a Comment