You are on page 1of 3

crypto isakmp key XYZ-VPN-IPSEC8/5/15 address

crypto isakmp key XYZ-VPN-IPSEC-VEGA8/5/15 address 200.200.100.18

XYZ-VPN-IPSEC-VEGA8/5/15

access-list 100 permit ip 172.16.64.0 0.0.0.63 host 200.200.100.2


access-list 100 permit ip 172.16.32.144 0.0.0.7 host 200.200.100.2

crypto isakmp policy 200


encr aes 256
authentication pre-share
group 5
!
crypto isakmp key XYZ-VPN-IPSEC-EP8/5/15 address 200.200.100.2
!
!
!
crypto ipsec transform-set VPN1 esp-aes esp-sha-hmac

ACL VEGA
access-list 100 permit ip 172.16.64.0 0.0.0.63 host 200.200.100.2
access-list 100 permit ip 172.16.32.144 0.0.0.7 host 200.200.100.2
!
crypto map ALL-VPN 200 ipsec-isakmp
set peer 200.200.100.2
set transform-set VPN1
match address 100

172.16.32.128 0.0.0.31
172.16.128.44 0.0.0.3
172.16.0.0 0.0.0.255
172.16.1.0 0.0.0.127
172.16.128.0 0.0.0.63
172.16.192.0 0.0.0.15

VPN del Edif EP SANTO DOMINGO A

crypto isakmp policy 200


encr aes 256
authentication pre-share
group 5
!
crypto isakmp key XYZ-VPN-IPSEC-VEGA8/5/15 address 200.200.100.18
!
!
!
crypto ipsec transform-set VPN1 esp-aes esp-sha-hmac
!

access-list 100 permit ip 172.16.32.128 0.0.0.31 host 200.200.100.18


access-list 100 permit ip 172.16.128.44 0.0.0.3 host 200.200.100.18
access-list 100 permit ip 172.16.0.0 0.0.0.255 host 200.200.100.18
access-list 100 permit ip 172.16.1.0 0.0.0.127 host 200.200.100.18
access-list 100 permit ip 172.16.128.0 0.0.0.63 host 200.200.100.18
access-list 100 permit ip 172.16.192.0 0.0.0.15 host 200.200.100.18
access-list 100 permit ip 172.16.32.128 0.0.0.31 host 200.200.100.22
access-list 100 permit ip 172.16.128.44 0.0.0.3 host 200.200.100.22
access-list 100 permit ip 172.16.0.0 0.0.0.255 host 200.200.100.22
access-list 100 permit ip 172.16.1.0 0.0.0.127 host 200.200.100.22
access-list 100 permit ip 172.16.128.0 0.0.0.63 host 200.200.100.22
access-list 100 permit ip 172.16.192.0 0.0.0.15 host 200.200.100.22
access-list 100 permit ip 172.16.32.128 0.0.0.31 host 200.200.100.14
access-list 100 permit ip 172.16.128.44 0.0.0.3 host 200.200.100.14
access-list 100 permit ip 172.16.0.0 0.0.0.255 host 200.200.100.14
access-list 100 permit ip 172.16.1.0 0.0.0.127 host 200.200.100.14
access-list 100 permit ip 172.16.128.0 0.0.0.63 host 200.200.100.14
access-list 100 permit ip 172.16.192.0 0.0.0.15 host 200.200.100.14

crypto map ALL-VPN 200 ipsec-isakmp


set peer 200.200.100.18
set peer 200.200.100.22
set peer 200.200.100.14
set transform-set VPN1
match address 100

int f0/0
crypto map ALL-VPN

VPN VEGA

crypto isakmp policy 200


encr aes 256
authentication pre-share
group 5
!
crypto isakmp key XYZ-VPN-IPSEC-VEGA-EP8/5/15 address 200.200.100.18
!
!
!
crypto ipsec transform-set VPN1 esp-aes esp-sha-hmac
!

access-list 100 permit ip 172.16.64.0 0.0.0.63 host 200.200.100.2


access-list 100 permit ip 172.16.32.144 0.0.0.7 host 200.200.100.2

no crypto map ALL-VPN 200 ipsec-isakmp


set peer 200.200.100.2
set transform-set VPN1
match address 100

int f1/0
crypto map ALL-VPN

crypto isakmp key XYZEPVEGA12345 address 200.200.100.18

172.16.0.128 255.255.255.224

LA Vega

crypto map ALL-VPN 200 ipsec-isakmp


set peer 200.200.100.2
set transform-set VPN1
match address 100

ip access-list extended VPN_IPSEC_TRAFFIC


permit ip 172.16.64.0 0.0.0.63

permit ip 172.16.32.144 0.0.0.7

deny ip 172.16.64.0 0.0.0.63 any


deny ip 172.16.32.144 0.0.0.7 any

ip access-list standard PAT


permit 172.16.64.0 0.0.0.31
permit 172.16.64.32 0.0.0.15

ip nat inside source route-map MAP-PAT interface Serial0/0/0 overload

route-map MAP_PAT permit 10


match ip address PAT

You might also like