Scribd Logo
Upload

Welcome to Scribd!

  • GRE Over IPSec !!

    Uploaded by

    Moklesur Rahman
    8 views3 pages
    The document contains configuration details for three routers - DHAKA, JASHARE and CTG. It defines an IKE policy using AES-256 encryption and pre-shared keys to establish IPsec tunnels between the routers. Access control lists and crypto maps are configured to permit GRE traffic between specific source-destination address pairs through the IPsec tunnels.

    Original Description:

    Original Title

    GRE Over IPSec !!(1)

    Copyright

    © © All Rights Reserved

    Available Formats

    TXT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    The document contains configuration details for three routers - DHAKA, JASHARE and CTG. It defines an IKE policy using AES-256 encryption and pre-shared keys to establish IPsec tunnels between the routers. Access control lists and crypto maps are configured to permit GRE traffic between specific source-destination address pairs through the IPsec tunnels.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    8 views3 pages

    GRE Over IPSec !!

    Uploaded by

    Moklesur Rahman
    The document contains configuration details for three routers - DHAKA, JASHARE and CTG. It defines an IKE policy using AES-256 encryption and pre-shared keys to establish IPsec tunnels between the routers. Access control lists and crypto maps are configured to permit GRE traffic between specific source-destination address pairs through the IPsec tunnels.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 3

    DHAKA Router

    ------------

    config t
    crypto isakmp policy 10
    encr aes 256
    authentication pre-share
    group 5
    lifetime 86400

    crypto isakmp key BSR@MTR#ZHR address 180.92.226.147


    crypto isakmp key BSR@MTR#ZHR address 203.80.189.190

    crypto ipsec transform-set TRANSFORMSET esp-aes 256 esp-sha-hmac


    mode tunnel

    crypto map CRYPTOMAP 10 ipsec-isakmp


    set peer 180.92.226.147
    set transform-set TRANSFORMSET
    match address 150
    crypto map CRYPTOMAP 20 ipsec-isakmp
    set peer 203.80.189.190
    set transform-set TRANSFORMSET
    match address 160

    access-list 150 permit gre host 203.188.244.116 host 180.92.226.147


    access-list 160 permit gre host 203.188.244.116 host 203.80.189.190

    config t
    inter GigabitEthernet0/0/1
    crypto map CRYPTOMAP

    ------------------------------------------------------------------------------

    JASHARE Router
    --------------

    config t
    crypto isakmp policy 10
    encr aes 256
    authentication pre-share
    group 5
    lifetime 86400
    crypto isakmp key BSR@MTR#ZHR address 203.188.244.116
    crypto isakmp key BSR@MTR#ZHR address 203.80.189.190

    crypto ipsec transform-set TRANSFORMSET esp-aes 256 esp-sha-hmac


    mode tunnel

    crypto map CRYPTOMAP 10 ipsec-isakmp


    set peer 203.188.244.116
    set transform-set TRANSFORMSET
    match address 150
    crypto map CRYPTOMAP 20 ipsec-isakmp
    set peer 203.80.189.190
    set transform-set TRANSFORMSET
    match address 160

    access-list 150 permit gre host 180.92.226.147 host 203.188.244.116


    access-list 160 permit gre host 180.92.226.147 host 203.80.189.190

    config t
    inter GigabitEthernet0/0/1
    crypto map CRYPTOMAP

    ----------------------------------------------------------------------

    CTG Router
    ----------

    config t
    crypto isakmp policy 10
    encr aes 256
    authentication pre-share
    group 5
    lifetime 86400

    crypto isakmp key BSR@MTR#ZHR address 203.188.244.116


    crypto isakmp key BSR@MTR#ZHR address 180.92.226.147

    crypto ipsec transform-set TRANSFORMSET esp-aes 256 esp-sha-hmac


    mode tunnel
    crypto map CRYPTOMAP 10 ipsec-isakmp
    set peer 203.188.244.116
    set transform-set TRANSFORMSET
    match address 150
    crypto map CRYPTOMAP 20 ipsec-isakmp
    set peer 180.92.226.147
    set transform-set TRANSFORMSET
    match address 160

    access-list 150 permit gre host 203.80.189.190 host 203.188.244.116


    access-list 160 permit gre host 203.80.189.190 host 180.92.226.147

    config t
    inter GigabitEthernet0/0/1
    crypto map CRYPTOMAP

    You might also like