VPN GRE Tunnel with crypto map problem

From: Sydney Hawke (sydneyhawke@yahoo.com)
Date: Wed May 09 2007 - 16:04:36 ART


Hi,

I have been testing this a lot and I just cannot get it to work (encrypt), is there anyone who are a better security person than I am that can help?

I appreciate your help in this.

All networks advertised in OSPF

ROUTER 4
interface Tunnel46
 ip address 46.46.46.4 255.255.255.0
 tunnel source 4.4.4.4
 tunnel destination 6.6.6.6
 crypto map CRYPTOMAP - Is it needed or just on the source interface ie the loopback?
!
interface Loopback0
 ip address 4.4.4.4 255.255.255.0
 crypto map CRYPTOMAP

ip access-list extended VPN
permit gre host 4.4.4.4 host 6.6.6.6

crypto isakmp policy 1
 encr 3des
 authentication pre-share
 group 2

crypto isakmp key CISCO address 6.6.6.6

crypto ipsec transform-set TRANSFORM esp-3des esp-sha-hmac

crypto map CRYPTOMAP 1 ipsec-isakmp
 set peer 6.6.6.6
 set transform-set TRANSFORM
 match address VPN
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
ROUTER 6
interface Tunnel46
 ip address 46.46.46.6 255.255.255.0
 tunnel source 6.6.6.6
 tunnel destination 4.4.4.4
 crypto map CRYPTOMAP - Is it needed or just on the source interface ie the loopback?

interface Loopback0
 ip address 6.6.6.6 255.255.255.0
 crypto map CRYPTOMAP

ip access-list extended VPN
permit gre host 6.6.6.6 host 4.4.4.4

crypto isakmp policy 1
 encr 3des
 authentication pre-share
 group 2

crypto isakmp key CISCO address 4.4.4.4

crypto ipsec transform-set TRANSFORM esp-3des esp-sha-hmac

crypto map CRYPTOMAP 1 ipsec-isakmp
 set peer 4.4.4.4
 set transform-set TRANSFORM
 match address VPN

Best Regards,

Sydney



This archive was generated by hypermail 2.1.4 : Fri Jun 01 2007 - 06:55:20 ART