You are on page 1of 2

Copy&Paste Configuration (network-a)

en
conf term
crypto isakmp policy 1
encr 3des
hash md5
authentication pre-share
group 2
lifetime 86400
exit
crypto isakmp key sshguru address 2.2.2.2
ip access-list extended VPN-ACL
permit ip 172.18.0.0 0.0.0.255 10.0.0.0 0.0.0.255
exit
crypto ipsec transform-set TSet esp-3des esp-md5-hmac
crypto map Crypt 10 ipsec-isakmp
set peer 2.2.2.2
set transform-set TSet
match address VPN-ACL
exit
interface FastEthernet0/1
crypto map Crypt
exit
ip nat inside source list 100 interface FastEthernet0/1 overload
access-list 100 deny ip 172.12.0.0 0.0.0.255 10.0.0.0 0.0.0.255
access-list 100 permit ip 172.12.0.0 0.0.0.255 any

Copy&Paste Configuration (network-b)


en
conf term
crypto isakmp policy 1
encr 3des
hash md5
authentication pre-share
group 2
lifetime 86400
exit
crypto isakmp key sshguru address 1.1.1.1
ip access-list extended VPN-ACL
permit ip 10.0.0.0 0.0.0.255 172.18.0.0 0.0.0.255
exit
crypto ipsec transform-set TSet esp-3des esp-md5-hmac
crypto map Crypt 10 ipsec-isakmp
set peer 1.1.1.1
set transform-set TSet
match address VPN-ACL
exit
interface FastEthernet0/1
crypto map Crypt
exit
ip nat inside source list 100 interface FastEthernet0/1 overload
access-list 100 deny ip 10.0.0.0 0.0.0.255 172.18.0.0 0.0.0.255
access-list 100 permit ip 10.10.0.0 0.0.0.255 any

You might also like