You are on page 1of 1

sabay asa (asa-outside 118.67.200.229, 172.16.249.2 serve-sabayr) Mobitel asa( remote 203.144.66.62, 10.9.11.

119 server-mobitel)

access-list inside_nat0_outbound extended permit ip 172.16.249.0 255.255.255.0 10.0.0.0 255.255.255.0 access-list outside_20_cryptomap extended permit ip 172.16.249.0 255.255.255.0 10.0.0.0 255.255.255.0 nat (inside) 0 access-list inside_nat0_outbound

crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac crypto map outside_map 20 match address outside_20_cryptomap crypto map outside_map 20 set peer 118.67.200.186 crypto map outside_map 20 set transform-set ESP-3DES-MD5

crypto map outside_map interface outside crypto isakmp enable outside crypto isakmp policy 20 authentication pre-share encryption 3des hash md5 group 2 lifetime 86400 isakmp nat-traversal 20

tunnel-group 118.67.200.186 type ipsec-l2l tunnel-group 118.67.200.186 ipsec-attributes pre-shared-key 123456 sysopt connection permit-ipsec

You might also like