From: miken (miken@xxxxxxxxx)
Date: Sat Apr 06 2002 - 23:17:49 GMT-3
Here ya go!
Basic Router-to-Router IPSec
Router A
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco123 address 160.0.0.1
crypto ipsec transform-set myset esp-des esp-md5-hmac
crypto map mymap local-address Serial0
crypto map mymap 1 ipsec-isakmp
set peer 160.0.0.1
set transform-set myset
match address 100
interface Ethernet0
ip address 10.0.0.1 255.255.255.0
interface Serial0
ip address 150.0.0.1 255.255.255.0
crypto map mymap
ip route 0.0.0.0 0.0.0.0 Serial0
access-list 100 permit ip 10.0.0.0 0.0.0.255 20.0.0.0 0.0.0.255
Router B
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco123 address 150.0.0.1
crypto ipsec transform-set myset esp-des esp-md5-hmac
crypto map mymap local-address Serial0
crypto map mymap 1 ipsec-isakmp
set peer 150.0.0.1
set transform-set myset
match address 100
interface Ethernet0
ip address 20.0.0.1 255.255.255.0
interface Serial0
ip address 160.0.0.1 255.255.255.0
crypto map mymap
ip route 0.0.0.0 0.0.0.0 Serial0
access-list 100 permit ip 20.0.0.0 0.0.0.255 10.0.0.0 0.0.0.255
HTH,
MikeN
----- Original Message -----
From: "Charles Carley" <ccarley@columbus.rr.com>
To: "Ccie" <ccielab@groupstudy.com>
Sent: Friday, April 05, 2002 7:11 PM
Subject: IPSEC
> I am having a little trouble getting the basic configuration example from
> the Cisco web site to work. Can someone post what they consider to be a
> minimal IPSEC configuration? Thanks.
>
> Charles
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:57:58 GMT-3