Migracion VPN L2L

VPN NAME_LAN LAN Phase 1
1 LAN_MUNI_PRUEBA 10.5.199.0 255.255.255.0 VPN_L2L_MUNICIPIO_PRUEBA

2 LAN_la_guardia1 192.168.1.0 255.255.255.0 vpn_L2L_la_guardia1
3 LAN_culpina 10.5.19.0 255.255.255.0 vpn_L2L_culpina
4 LAN_la_guardia2 10.5.55.0 255.255.255.0 vpn_L2L_la_guardia2
5 LAN_puerto_quijarro 10.5.33.0 255.255.255.0 vpn_L2L_puerto_quijarro
6 LAN_vacas 10.5.90.0 255.255.255.0 vpn_L2L_vacas
7 LAN_camiri 192.168.147.0 255.255.255.0 vpn_L2L_camiri
8 LAN_asuncion_guarayos 192.168.133.0 255.255.255.0 vpn_L2L_asuncion_guarayos
9 LAN_arani 10.5.5.0 255.255.255.0 vpn_L2L_arani
10 LAN_arbieto 192.168.35.0 255.255.255.0 vpn_L2L_arbieto
11 LAN_betanzos 10.5.44.0 255.255.255.0 vpn_L2L_betanzos
12 LAN_capinota 10.5.58.0 255.255.255.0 vpn_L2L_capinota
13 LAN_caracollo 10.5.15.0 255.255.255.0 vpn_L2L_caracollo
14 LAN_carapari 10.5.23.0 255.255.255.0 vpn_L2L_carapari
15 LAN_charazani 10.5.28.0 255.255.255.0 vpn_L2L_charazani
16 LAN_chayanta 10.5.20.0 255.255.255.0 vpn_L2L_chayanta
17 LAN_chimore 10.5.11.0 255.255.255.0 vpn_L2L_chimore
18 LAN_chulumani 10.5.27.0 255.255.255.0 vpn_L2L_chulumani
19 LAN_cliza 10.5.31.0 255.255.255.0 vpn_L2L_cliza
20 LAN_cobija 192.168.249.0 255.255.255.0 vpn_L2L_cobija
21 LAN_colcaphirua 192.168.19.0 255.255.255.0 vpn_L2L_colcaphirua
22 LAN_colomi 10.5.1.0 255.255.255.0 vpn_L2L_colomi
23 LAN_colpa_belgica 10.5.76.0 255.255.255.0 vpn_L2L_colpa_belgica
24 LAN_concepcion 10.5.8.0 255.255.255.0 vpn_L2L_concepcion
25 LAN_el_torno 10.5.22.0 255.255.255.0 vpn_L2L_el_torno
26 LAN_entre_rios 10.5.32.0 255.255.255.0 vpn_L2L_entre_rios
27 LAN_guanay 192.168.33.0 255.255.255.0 vpn_L2L_guanay
28 LAN_huanuni 10.5.9.0 255.255.255.0 vpn_L2L_huanuni
29 LAN_independencia 10.5.17.0 255.255.255.0 vpn_L2L_independencia
30 LAN_jesus_machaca 10.5.24.0 255.255.255.0 vpn_L2L_jesus_machaca
31 LAN_mairana 10.5.45.0 255.255.255.0 vpn_L2L_mairana
32 LAN_mecapaca 10.5.6.0 255.255.255.0 vpn_L2L_mecapaca
33 LAN_mineros 10.5.16.0 255.255.255.0 vpn_L2L_mineros
34 LAN_mizque 10.5.18.0 255.255.255.0 vpn_L2L_mizque
35 LAN_morochata 10.5.13.0 255.255.255.0 vpn_L2L_morochata
36 LAN_moromoro 10.5.25.0 255.255.255.0 vpn_L2L_moromoro
37 LAN_papelpampa 10.5.50.0 255.255.255.0 vpn_L2L_papelpampa
38 LAN_porongo 10.5.34.0 255.255.255.0 vpn_L2L_porongo
39 LAN_pucarani 10.5.78.0 255.255.255.0 vpn_L2L_pucarani
40 LAN_riveralta 10.5.14.0 255.255.255.0 vpn_L2L_riveralta
41 LAN_rurrenabaque 10.5.29.0 255.255.255.0 vpn_L2L_rurrenabaque
42 LAN_saavedra 10.5.37.0 255.255.255.0 vpn_L2L_saavedra
43 LAN_san_benito 10.5.87.0 255.255.255.0 vpn_L2L_san_benito
44 LAN_san_juan 10.5.3.0 255.255.255.0 vpn_L2L_san_juan
45 LAN_san_julian 10.5.54.0 255.255.255.0 vpn_L2L_san_julian
46 LAN_san_lucas 10.5.82.0 255.255.255.0 vpn_L2L_san_lucas
47 LAN_san_ramon 10.5.2.0 255.255.255.0 vpn_L2L_san_ramon
48 LAN_shinaota 10.5.26.0 255.255.255.0 vpn_L2L_shinaota
49 LAN_sipe_sipe 10.5.12.0 255.255.255.0 vpn_L2L_sipe_sipe
50 LAN_tiquipaya 10.5.56.0 255.255.255.0 vpn_L2L_tiquipaya
51 LAN_tiraque 10.5.4.0 255.255.255.0 vpn_L2L_tiraque
52 LAN_tolata 10.5.60.0 255.255.255.0 vpn_L2L_tolata
53 LAN_totora 10.5.30.0 255.255.255.0 vpn_L2L_totora
54 LAN_uriondo 10.5.86.0 255.255.255.0 vpn_L2L_uriondo
55 LAN_villa_rivero 10.5.67.0 255.255.255.0 vpn_L2L_villa_rivero
56 LAN_villa_tunari 10.5.10.0 255.255.255.0 vpn_L2L_villa_tunari
57 LAN_villazon 10.5.0.0 255.255.255.0 vpn_L2L_villazon
58 LAN_vinto 192.168.65.0 255.255.255.0 vpn_L2L_vinto
59 LAN_yacuma 10.5.35.0/24, 10.101.6.0/24 vpn_L2L_yacuma
60 LAN_Villarroel 10.5.57.0/24 vpn_L2L_villarroel
61 LAN_guayaramerin 10.5.96.0/24 vpn_L2L_guayaramerin
62 LAN_padcaya 10.5.98.0/24 vpn_L2L_padcaya
63 LAN_tarata 10.5.100.0/24 vpn_L2L_tarata
- LAN_aiquile 10.5.115.0/24 vpn_L2L_aiquile
- LAN_palos_blancos 10.5.122.0/24 vpn_L2L_palos_blancos
- LAN_colquencha 10.5.124.0/24 vpn_L2L_colquencha
- LAN_taraco 10.5.126.0/24 vpn_L2L_taraco
- LAN_yunchara 10.5.128.0/24 vpn_L2L_yunchara
- LAN_tiahuanacu 10.5.133.0/24 vpn_L2L_tiahuanacu
- LAN_sica-sica 10.5.136.0/24 vpn_L2L_sica-sica
- LAN_yotala 10.5.138.0/24 vpn_L2L_yotala
Interface DH-f1 Cifrado-Hash lifetime phase1 Peer PSK
wan2 dhgrp 5 3des-sha1 186.121.211.27 shiba7608

wan2 dhgrp 2 3des-md5 28800 190.171.216.2 shiba7608
wan2 dhgrp 5 3des-sha1 28800 200.87.197.24 shiba7608
wan2 dhgrp 5 3des-sha1 28800 190,129,244,226 shiba7608
wan1 dhgrp 5 aes-128-sha1 86400 - shiba7608
wan2 dhgrp 5 3des-sha1 28800 dynamico shiba7608
1ra 2da
Router
Phase2 Enc-Hash DH-f2 key-lifetime Policy Policy
ID Peer
ID ID
Tunnel_Muni_Prueba 3des-sha1 dhgrp 5 1800 46 47 5
tunel_la_guardia1 3des-md5 dhgrp 2 28800 48 49 10
tunel_culpina 3des-md5 dhgrp 2 28800 50 51 12
tunel_la_guardia2 3des-md5 dhgrp 2 28800 52 53 14
tunel_puerto_quijarro 3des-md5 dhgrp 2 28800 54 55 16
tunel_vacas 3des-md5 dhgrp 2 28800 56 57 18
tunel_camiri 3des-sha1 dhgrp 5 1800 58 59 20
tunel_asuncion_guarayos 3des-sha1 dhgrp 5 1800 60 61 22
tunel_arani 3des-sha1 dhgrp 5 1800 62 63 24
tunel_arbieto 3des-sha1 dhgrp 5 1800 64 65 26
tunel_betanzos 3des-sha1 dhgrp 5 1800 66 67 28
tunel_capinota 3des-sha1 dhgrp 5 1800 68 69 30
tunel_caracollo 3des-sha1 dhgrp 5 1800 70 71 32
tunel_carapari 3des-sha1 dhgrp 5 1800 72 73 34
tuenl_charazani 3des-sha1 dhgrp 5 1800 74 75 36
tunel_chayanta 3des-sha1 dhgrp 5 1800 76 77 38
tunel_chimore 3des-sha1 dhgrp 5 1800 78 79 40
tunel_chulumani 3des-sha1 dhgrp 5 1800 80 81 42
tunel_cliza 3des-sha1 dhgrp 5 1800 82 83 44
tunel_cobija 3des-sha1 dhgrp 5 1800 84 85 46
tunel_colcaphirua 3des-sha1 dhgrp 5 1800 86 87 48
tunel_colomi 3des-sha1 dhgrp 5 1800 88 89 50
tunel_copa_belgica 3des-sha1 dhgrp 5 1800 90 91 52
tunel_concepcion 3des-sha1 dhgrp 5 1800 92 93 54
tunel_el_torno 3des-sha1 dhgrp 5 1800 94 95 56
tunel_entre_rios 3des-sha1 dhgrp 5 1800 96 97 58
tunel_guanay 3des-sha1 dhgrp 5 1800 98 99 60
tunel_huanuni 3des-sha1 dhgrp 5 1800 100 101 62
tunel_independencia 3des-sha1 dhgrp 5 1800 102 103 64
tunel_jesus_machaca 3des-sha1 dhgrp 5 1800 104 105 66
tunel_mairana 3des-sha1 dhgrp 5 1800 106 107 68
tunel_mecapaca 3des-sha1 dhgrp 5 1800 108 109 70
tunel_mineros 3des-sha1 dhgrp 5 1800 110 111 72
tunel_mizque 3des-sha1 dhgrp 5 1800 112 113 74
tunel_morochata 3des-sha1 dhgrp 5 1800 114 115 76
tunel_moromoro 3des-sha1 dhgrp 5 1800 116 117 78
tunel_papelpampa 3des-sha1 dhgrp 5 1800 118 119 80
tunel_porongo 3des-sha1 dhgrp 5 1800 120 121 82
tunel_pucarani 3des-sha1 dhgrp 5 1800 122 123 84
tunel_riveralta 3des-sha1 dhgrp 5 1800 124 125 86
tunel_rurrenabaque 3des-sha1 dhgrp 5 1800 126 127 88
tunel_saavedra 3des-sha1 dhgrp 5 1800 128 129 90
tunel_san_benito 3des-sha1 dhgrp 5 1800 130 131 92
tunel_san_juan 3des-sha1 dhgrp 5 1800 132 133 94
tunel_san_julian 3des-sha1 dhgrp 5 1800 134 135 96
tunel_san_lucas 3des-sha1 dhgrp 5 1800 136 137 98
tunel_san_ramon 3des-sha1 dhgrp 5 1800 138 139 100
tunel_shinaota 3des-sha1 dhgrp 5 1800 140 141 102
tunel_sipe_sipe 3des-sha1 dhgrp 5 1800 142 143 104
tuenl_tiquipaya 3des-sha1 dhgrp 5 1800 144 145 106
tunel_tiraque 3des-sha1 dhgrp 5 1800 146 147 108
tunel_tolata 3des-sha1 dhgrp 5 1800 148 149 110
tunel_totora 3des-sha1 dhgrp 5 1800 150 151 112
tunel_uriondo 3des-sha1 dhgrp 5 1800 152 153 114
tunel_villa_rivero 3des-sha1 dhgrp 5 1800 154 155 116
tuenl_villa_tunari 3des-sha1 dhgrp 5 1800 156 157 118
tunel_villazon 3des-sha1 dhgrp 5 1800 158 159 120
tunel_vinto 3des-sha1 dhgrp 5 1800 160 161 122
tunel_yacuma 3des-sha1 dhgrp 5 1800 162 163 124
tunel_villarroel 3des-sha1 dhgrp 5 1800 162 163 124
tunel_guayaramerin 3des-sha1 dhgrp 5 1800 - - -
tunel_padcaya 3des-sha1 dhgrp 5 1800 - - -
tunel_tarata des-md5 - 28800 - - -
tunel_aiquile 3des-sha1 dhgrp 5 1800 - - -
tunel_palos_blancos 3des-sha1 dhgrp 5 1800 - - -
tunel_colquencha 3des-sha1 dhgrp 5 1800 - - -
tunel_taraco 3des-sha1 dhgrp 5 1800 - - -
tunel_yunchara 3des-sha1 dhgrp 5 1800 - - -
tune_tiahuanacu 3des-sha1 dhgrp 5 1800 - - -
tune_sica-sica 3des-sha1 dhgrp 5 1800 - - -
tunel_yotala 3des-sha1 dhgrp 5 1800 - - -
Router
Route Comment Route Comment
ID LAN
peer_VPN_L2L_MUNICIPIO_PR 6 LAN_MUNI_PRUEBA
peer_vpn_L2L_la_guardia1 11 LAN_la_guardia1
peer_vpn_L2L_culpina 13 LAN_culpina
peer_vpn_L2L_la_guardia2 15 LAN_la_guardia2
peer_vpn_L2L_puerto_quijarro 17 LAN_puerto_quijarro
peer_vpn_L2L_vacas 19 LAN_vacas
peer_vpn_L2L_camiri 21 LAN_camiri
peer_vpn_L2L_asuncion_guaray 23 LAN_asuncion_guarayos
peer_vpn_L2L_arani 25 LAN_arani
peer_vpn_L2L_arbieto 27 LAN_arbieto
peer_vpn_L2L_betanzos 29 LAN_betanzos
peer_vpn_L2L_capinota 31 LAN_capinota
peer_vpn_L2L_caracollo 33 LAN_caracollo
peer_vpn_L2L_carapari 35 LAN_carapari
peer_vpn_L2L_charazani 37 LAN_charazani
peer_vpn_L2L_chayanta 39 LAN_chayanta
peer_vpn_L2L_chimore 41 LAN_chimore
peer_vpn_L2L_chulumani 43 LAN_chulumani
peer_vpn_L2L_cliza 45 LAN_cliza
peer_vpn_L2L_cobija 47 LAN_cobija
peer_vpn_L2L_colcaphirua 49 LAN_colcaphirua
peer_vpn_L2L_colomi 51 LAN_colomi
peer_vpn_L2L_colpa_belgica 53 LAN_colpa_belgica
peer_vpn_L2L_concepcion 55 LAN_concepcion
peer_vpn_L2L_el_torno 57 LAN_el_torno
peer_vpn_L2L_entre_rios 59 LAN_entre_rios
peer_vpn_L2L_guanay 61 LAN_guanay
peer_vpn_L2L_huanuni 63 LAN_huanuni
peer_vpn_L2L_independencia 65 LAN_independencia
peer_vpn_L2L_jesus_machaca 67 LAN_jesus_machaca
peer_vpn_L2L_mairana 69 LAN_mairana
peer_vpn_L2L_mecapaca 71 LAN_mecapaca
peer_vpn_L2L_mineros 73 LAN_mineros
peer_vpn_L2L_mizque 75 LAN_mizque
peer_vpn_L2L_morochata 77 LAN_morochata
peer_vpn_L2L_moromoro 79 LAN_moromoro
peer_vpn_L2L_papelpampa 81 LAN_papelpampa
peer_vpn_L2L_porongo 83 LAN_porongo
peer_vpn_L2L_pucarani 85 LAN_pucarani
peer_vpn_L2L_riveralta 87 LAN_riveralta
peer_vpn_L2L_rurrenabaque 89 LAN_rurrenabaque
peer_vpn_L2L_saavedra 91 LAN_saavedra
peer_vpn_L2L_san_benito 93 LAN_san_benito
peer_vpn_L2L_san_juan 95 LAN_san_juan
peer_vpn_L2L_san_julian 97 LAN_san_julian
peer_vpn_L2L_san_lucas 99 LAN_san_lucas
peer_vpn_L2L_san_ramon 101 LAN_san_ramon
peer_vpn_L2L_shinaota 103 LAN_shinaota
peer_vpn_L2L_sipe_sipe 105 LAN_sipe_sipe
peer_vpn_L2L_tiquipaya 107 LAN_tiquipaya
peer_vpn_L2L_tiraque 109 LAN_tiraque
peer_vpn_L2L_tolata 111 LAN_tolata
peer_vpn_L2L_totora 113 LAN_totora
peer_vpn_L2L_uriondo 115 LAN_uriondo
peer_vpn_L2L_villa_rivero 117 LAN_villa_rivero
peer_vpn_L2L_villa_tunari 119 LAN_villa_tunari
peer_vpn_L2L_villazon 121 LAN_villazon
peer_vpn_L2L_vinto 123 LAN_vinto
peer_vpn_L2L_yacuma 125 LAN_yacuma
peer_vpn_L2L_villarroel 125 LAN_Villarroel
peer_vpn_L2L_guayaramerin LAN_guayaramerin
peer_vpn_L2L_padcaya LAN_padcaya
peer_vpn_L2L_tarata LAN_tarata
peer_vpn_L2L_aiquile LAN_aiquile
peer_vpn_L2L_palos_blancos LAN_palos_blancos
peer_vpn_L2L_colquencha LAN_colquencha
peer_vpn_L2L_taraco LAN_taraco
peer_vpn_L2L_yunchara LAN_yunchara
peer_vpn_L2L_tiahuanacu LAN_tiahuanacu
peer_vpn_L2L_sica-sica LAN_sica-sica
peer_vpn_L2L_yotala LAN_yotala
VPN NAME_LAN LAN Phase 1
1 LAN_ACHACACHI 10.5.38.0 /24 VPN_ACHACACHI

2 LAN_TOLEDO 10.5.39.0 /24 VPN_TOLEDO
3 LAN_SABAYA 10.5.40.0 /24 VPN_SABAYA
4 LAN_COLLANA 10.5.41.0 /24 VPN_COLLANA
5 LAN_ESCARA 10.5.42.0 /24 VPN_ESCARA
6 LAN_COTAGAITA 10.5.46.0 /24 VPN_COTAGAITA
7 LAN_Ouerto Acosta 10.5.47.0 /24 VPN_Puerto_acosta
8 LAN_YANPARAE 10.5.36.0 /24 VPN_YANPARAE
9 LAN_COTAPATA 10.5.48.0 /24 VPN_COTAPATA
10 LAN_CARANAVI 10.5.51.0 /24 VPN_CARANAVI
11 LAN_CAIZAD 10.5.52.0 /24 VPN_CAIZAD
12 LAN_MONTEAGUDO 10.5.53.0 /24 VPN_MONTEAGUDO
13 lan_santa_ana_sahara 10.5.59.0 /24 VPN_Santa_ana_Sahara
14 lan_cabezas 10.5.61.0 /24 vpn_cabezas
15 LAN_TOMINA 10.5.62.0 /24 VPN_TOMINA
16 LAN_BUENA_VISTA 10.5.63.0 /24 VPN_BUENA_VISTA
17 LAN_YAPACANI 10.5.64.0 /24 VPN_YAPACANI
18 LAN_SANTIBAÑEZ 10.5.65.0 /24 VPN_SANTIBAÑEZ
19 LAN_COMARAPA 10.5.66.0 /24 VPN_COMARAPA
20 LAN_SAN_CARLOS 10.5.68.0 /24 vpn_san_carlos
21 LAN_EL-PUENTE 10.5.71.0 /24 VPN_EL-PUENTE
22 LAN_PORCo 10.5.72.0 /24 VPN_PORCO
23 LAN_FERNANDEZ-ALONZO 10.5.73.0 /24 VPN_FERNANDEZ-ALONZO
24 LAN_SAN-BORJA 10.5.74.0 /24 VPN_SAN-BORJA
25 LAN_UYUNI 10.5.75.0 /24 VPN_UYUNI
26 LAN_IRUPANA 10.5.77.0 /24 VPN_IRUPANA
27 LAN_SANJOSE_CHIQUITOS 10.5.79.0 /24 VPN_SAN_JOSE_CHIQUITOS
28 LAN_PUNATA 10.5.80.0 /24 VPN_PUNATA
29 LAN_LURIVAY 10.5.81.0 /24 VPN_LURIBAY
30 LAN_CARANGAS 10.5.83.0 /24 VPN_CARANGAS
31 Lan_colchak 10.5.84.0 /24 vpn_colchak
32 Lan_San_Pedro 10.5.85.0 /24 vpn_san_pedro
33 LAN_PALCA 10.5.88.0 /24 VPN_PALCA
34 LAN_PAILON 10.5.89.0 /24 VPN_PAILON
35 LAN_CHULUMANI 10.5.91.0 /24 VPN_CHULUMANI
36 lan_soracachi 10.5.92.0 /24 vpn_soracachi
37 lan_sapahaqui 10.5.94.0 /24 vpn_sapahaqui
38 LAN_SANMIGUEL_DE_VELASCO 10.5.102.0 /24 VPN_SANMIGUEL_DE_VELASCO
39 LAN_batallas 10.5.99.0 /24 VPN_BATALLAS
40 LAN_ZUDAÑEZ 10.5.104.0 /24 VPN_ZUDAÑEZ
41 LAN_SANTIAGO_ANDAMARCA 10.5.107.0 /24 VPN_SANTIAGO_ANDAMARCA
42 LAN_cuevo 10.5.109.0 /24 VPN_CUEVO
43 LAN_CRUZ-MACHACAMARCA" 10.5.108.0 /24 VPN_CRUZ-MACHACAMARCA
44 LAN_RIVERA 10.5.110.0 /24 VPN_RIVERA
45 LAN_PATACAMAYA 10.5.112.0 /24 VPN_PATACAMAYA
lifetime
Interface DH-f1 Cifrado-Hash Peer PSK Phase2
phase1
wan1 5 3des-sha1 28800 dynamic
wan1 1 aes256-md5 86400 dynamic
wan1 2 3des-md5 28800 dynamic
wan1 5 des-md5 28800 dynamic
wan1 2 aes128-sha256 86400 dynamic
wan1 1 des-sha1 28800 dynamic
wan1 2, 5 aes128-sha1 86400 dynamic
wan1 5 aes256-sha1 86400 dynamic vpnpataca 192.9.200.128 /26
192.168.150.0 /24
Enc-Hash DH-f2 key-lifetime
3des-sha1 5 1800
3des-md5 - 28800
DES MD5 1 AES128 MD5 1 AES256 MD5 1
DES SHA1 1 AES128 SHA1 1 AES256 SHA1 1
3DES MD5 1 AES192 MD5 1
3DES SHA1 1 AES192 SHA1 1
#########################################################
TEMPLATE VPN L2L FORTINET
##########################################################
config firewall address
edit "LAN_MUNI_PRUEBA"
set subnet 10.5.199.0 255.255.255.0
next
end
config vpn ipsec phase1

edit "VPN_L2L_MUNICIPIO_PRUEBA"
set interface "wan2"
set dhgrp 5
set proposal 3des-sha1
set remote-gw 186.121.211.27
set psksecret ENC
AAaf/LbljzmsWVTo6il8sXDp6v+OV04BfAR+0ZwLetcOKJoL1CCcvjFa/SE16Y/bMdLvi4OGIyTeG30Av/
cGg3ymf6XQqzJlS2GL09WRnXftlo2Q
next
end

edit "Tunnel_Muni_Prueba"
set keepalive enable
set phase1name "VPN_L2L_MUNICIPIO_PRUEBA"
set dst-addr-type name
set proposal 3des-sha1
set src-addr-type name
set dhgrp 5
set dst-name "LAN_MUNI_PRUEBA"
set keylifeseconds 1800
set src-name "LAN_DMZ_MUNICIPIOS"
next
end
#########################################################
2do TEMPLATE VPN L2L FORTINET
##########################################################
config firewall address
edit "LAN_MUNI_PRUEBA"
set subnet 10.5.199.0 255.255.255.0
next
end
edit "VPN_L2L_MUNICIPIO_PRUEBA"
set interface "wan2"
set dhgrp 2
set proposal 3des-md5
set remote-gw 186.121.211.27
set psksecret ENC
AAaf/LbljzmsWVTo6il8sXDp6v+OV04BfAR+0ZwLetcOKJoL1CCcvjFa/SE16Y/bMdLvi4OGIyTeG30Av/
cGg3ymf6XQqzJlS2GL09WRnXftlo2Q
next
end

set dhgrp 2
set dhgrp 2
next
end
##############################################################
config firewall policy

edit 46
set srcintf "dmz1"
set dstintf "wan2"
set srcaddr "LAN_DMZ_MUNICIPIOS"
set dstaddr "LAN_MUNI_PRUEBA"
set action ipsec
set schedule "always"
set service "MUNI-PING-HTTP-HTTPS-DNS"
set inbound enable
set outbound enable
set vpntunnel "VPN_L2L_MUNICIPIO_PRUEBA"
next
edit 47
set srcintf "dmz1"
set dstintf "internal"
set srcaddr "LAN_MUNI_PRUEBA"
set dstaddr "GRP_Services"
set action accept
set schedule "always"
set service "MUNI-PING-HTTP-HTTPS-DNS"
next
end
############################################################
config router static

edit 5
set comment "Enrutamiento VPN L2L"
set device "wan2"
set dst 186.121.211.27 255.255.255.255
set gateway 190.181.5.41
next
edit 6
set comment "VPN L2L PRUEBA"
set device "wan2"
set dst 10.5.199.0 255.255.255.0
set gateway 190.181.5.41
next
end
G30Av/
G30Av/
# Servicio IP Real IP NAT Comentarios Nombre Aplicación
SRV_TEST 192.9.200.168 10.7.1.3 Fuera de Linea
Servidor
Exclusivo
1 DNS 10.7.1.137 - Municipios1
para esta
zona.
2 migracion2 172.21.25.117 10.7.1.117 Siges97413CAP
3 migracion1 172.21.25.118 10.7.1.118 Siges97413DES
4 DNS2 192.9.200.137 10.7.1.138 Siges_97855_smas2
5 masivos 172.21.25.151 10.7.1.151 Sirec
6 mail 192.9.200.158 10.7.1.158 Vehiculos_Inmuebles_Masivos
7 test-ruat 192.168.150.18 10.7.1.18 mail
8 vieoconf 172.21.20.188 10.7.1.188 mesajeria
9 Municipios1 192,168,150,189 10.7.1.189 municipios2
10 mesajeria 192,168,150,236 10.7.1.236 test-ruat
11 Fuera de Linea 172.21.25.251 10.7.1.251
12 Siges_97855_smas2 172.21.25.253 10.7.1.253
13 municipios2 192.168.150.52 10.7.1.52
14 Sirec 192.168.150.55 10.7.1.55
15 Siges97413CAP 172.21.20.57 10.7.1.57
16 Siges97413DES 172.21.20.59 10.7.1.59
17 masivos2 172.21.25.70 10.7.1.70
18 capacita 192.168.150.97 10.7.1.97
DMZ antigua de Provincias IP INTERNA actual PROPUESTA DE NATE
dmz1(DMZ_MUNI)/10.7.1.251 172.21.25.251 172.17.18.251
dmz1(DMZ_MUNI)/10.7.1.189 192,168,150,189 172.17.18.189
dmz1(DMZ_MUNI)/10.7.1.57 172.21.20.57 172.17.18.57

dmz1(DMZ_MUNI)/10.7.1.59 172.21.20.59 172.17.18.59
dmz1(DMZ_MUNI)/10.7.1.253 172.21.25.253 172.17.18.253
dmz1(DMZ_MUNI)/10.7.1.55 192.168.150.55 172.17.18.40
dmz1(DMZ_MUNI)/10.7.1.37 172.21.25.37 172.17.18.37
dmz1(DMZ_MUNI)/10.7.1.158 192.9.200.158 172.17.18.158
dmz1(DMZ_MUNI)/10.7.1.236 192,168,150,236 172.17.18.236
dmz1(DMZ_MUNI)/10.7.1.52 192.168.150.52 172.17.18.52
dmz1(DMZ_MUNI)/10.7.1.18 192.168.150.18 172.17.18.18
OBSERVACIONES
PRODUCCION MUNICIPIOS ADMIN USUARIOS FDL
PRODUCCION MUNICIPIOS VEHICULOS CONTRIBUYENTES
Business Object Produccion UGG

Business Object Desarrollo UGG
NO ADMINISTRADO POR SERVAPP
NO ADMINISTRADO POR SERVAPP ya se encuentra en la zona dmz como e
Ambiente de Pruebas Masivos UGG
NO ADMINISTRADO POR SERVAPP
Ambiente PRODUCCION Mensajeria y Wikipedia
PRODUCCION MUNICIPIOS VEHICULOS CONTRIBUYENTES
PRODUCCION MUNICIPIOS INMUEBLES
ra en la zona dmz como equipo fisico
VPN NAME_LAN LAN Phase 1 Interface
1 LAN_ACHACACHI 10.5.38.0 /24 VPN_ACHACACHI wan1

2 LAN_TOLEDO 10.5.39.0 /24 VPN_TOLEDO wan1
3 LAN_SABAYA 10.5.40.0 /24 VPN_SABAYA wan1
4 LAN_COLLANA 10.5.41.0 /24 VPN_COLLANA wan2
5 LAN_ESCARA 10.5.42.0 /24 VPN_ESCARA wan1
6 LAN_COTAGAITA 10.5.46.0 /24 VPN_COTAGAITA wan1
7 LAN_Puerto Acosta 10.5.47.0 /24 VPN_Puerto_acosta wan2
8 LAN_YANPARAE 10.5.36.0 /24 VPN_YANPARAE wan1
9 LAN_COTAPATA 10.5.48.0 /24 VPN_COTAPATA wan1
10 LAN_CARANAVI 10.5.51.0 /24 VPN_CARANAVI wan1
11 LAN_CAIZAD 10.5.52.0 /24 VPN_CAIZAD wan1
12 LAN_MONTEAGUDO 10.5.53.0 /24 VPN_MONTEAGUDO wan1
13 lan_santa_ana_sahara 10.5.59.0 /24 VPN_Santa_ana_Sahara wan1
14 lan_cabezas 10.5.61.0 /24 vpn_cabezas wan1
15 LAN_TOMINA 10.5.62.0 /24 VPN_TOMINA wan1
16 LAN_BUENA_VISTA 10.5.63.0 /24 VPN_BUENA_VISTA wan1
17 LAN_YAPACANI 10.5.64.0 /24 VPN_YAPACANI wan1
18 LAN_SANTIBAÑEZ 10.5.65.0 /24 VPN_SANTIBAÑEZ wan1
19 LAN_COMARAPA 10.5.66.0 /24 VPN_COMARAPA wan1
20 LAN_SAN_CARLOS 10.5.68.0 /24 vpn_san_carlos wan1
21 LAN_EL-PUENTE 10.5.71.0 /24 VPN_EL-PUENTE wan1
22 LAN_PORCo 10.5.72.0 /24 VPN_PORCO wan1
23 LAN_FERNANDEZ-ALONZO 10.5.73.0 /24 VPN_FERNANDEZ-ALONZO wan1
24 LAN_SAN-BORJA 10.5.74.0 /24 VPN_SAN-BORJA wan1
25 LAN_UYUNI 10.5.75.0 /24 VPN_UYUNI wan1
26 LAN_IRUPANA 10.5.77.0 /24 VPN_IRUPANA wan1
27 LAN_SANJOSE_CHIQUITOS 10.5.79.0 /24 VPN_SAN_JOSE_CHIQUITOS wan1
28 LAN_PUNATA 10.5.80.0 /24 VPN_PUNATA wan1
29 LAN_LURIVAY 10.5.81.0 /24 VPN_LURIBAY wan1
30 LAN_CARANGAS 10.5.83.0 /24 VPN_CARANGAS wan1
31 Lan_colchak 10.5.84.0 /24 vpn_colchak wan1
32 Lan_San_Pedro 10.5.85.0 /24 vpn_san_pedro wan1
33 LAN_PALCA 10.5.88.0 /24 VPN_PALCA wan1
34 LAN_PAILON 10.5.89.0 /24 VPN_PAILON wan1
35 LAN_CHULUMANI 10.5.91.0 /24 VPN_CHULUMANI wan1
36 lan_soracachi 10.5.92.0 /24 vpn_soracachi wan1
37 lan_sapahaqui 10.5.94.0 /24 vpn_sapahaqui wan1
38 LAN_SANMIGUEL_DE_VELASCO 10.5.102.0 /24 VPN_SANMIGUEL_DE_VELASCO wan1
39 LAN_batallas 10.5.99.0 /24 VPN_BATALLAS wan1
40 LAN_ZUDAÑEZ 10.5.104.0 /24 VPN_ZUDAÑEZ wan1
41 LAN_SANTIAGO_ANDAMARCA 10.5.107.0 /24 VPN_SANTIAGO_ANDAMARCA wan1
42 LAN_cuevo 10.5.109.0 /24 VPN_CUEVO wan1
43 LAN_CRUZ-MACHACAMARCA" 10.5.108.0 /24 VPN_CRUZ-MACHACAMARCA wan1
44 LAN_RIVERA 10.5.110.0 /24 VPN_RIVERA wan1
45 LAN_PATACAMAYA 10.5.112.0 /24 VPN_PATACAMAYA wan1
lifetime
DH-f1 Cifrado-Hash Peer PSK Phase2 Enc-Hash
phase1
5 3des-sha1 86400 dynamic shiba7608 172.17.18.0/24 3des-md5
1 aes256-md5 86400 dynamic shiba7608 172.17.18.0/24 3des-md5
1 aes192-md5 86400 dynamic shiba7608 172.17.18.0/24 3des-md5
2 3des-md5 86400 dynamic shiba7608 172.17.18.0/24 3des-md5
1 3des-md5 86400 dynamic shiba7608 172.17.18.0/24 3des-md5
5 des-md5 86400 dynamic shiba7608 172.17.18.0/24 3des-md5
2 aes128-sha256 86400 dynamic
1 des-sha1 86400 dynamic shiba7608 172.17.18.0/24 3des-md5
2 des-md5 86400 dynamic shiba7608 172.17.18.0/24 3des-md5
5 aes192-sha1 86400 dynamic shiba7608 172.17.18.0/24 3des-md5
2 aes192-md5 86400 dynamic
2 3des-sha256 86400 dynamic
5 des-sha256 86400 dynamic
5 3des-sha256 86400 dynamic
2, 5 aes128-sha1 86400 dynamic
1 des-md5 86400 dynamic
5 3des-md5 86400 dynamic
192.9.200.128 /26
5 aes256-sha1 86400 dynamic vpnpataca 3des-md5
192.168.150.0 /24
DH-f2 key-lifetime
- 28800
- 28800
- 28800
- 28800
- 28800
- 28800
- 28800
- 28800
- 28800
- 28800
- 28800
- 28800
- 28800
No. MUNICIPIO EQUIPO CONTACTO CELULAR
1 ACHACACHI MAIPU WILSON CONDORI SACA 60161717
2 TOLEDO MAIPU MARISOL POMA ALEJANDRO 78602351
3 SABAYA MAIPU ALVARO DENNIS VASQUEZ 73265820
4 COLLANA MAIPU SANTOS ELOY MAMANI 73213172
5 ESCARA MAIPU ARMIN QUISPE VILLCA 72474597 / 71843398
6 COTAGAITA MAIPU NILDA YOBANA IBARRA JORGE 72400024
7 PUERTO ACOSTA MAIPU GERMAN MAMANI 72091351
8 YANPARAE MAIPU SIMEON FERNANDEZ ZORRILLA 75454713 / 72869979
9 CARANAVI MAIPU GUILLE GRACIOLO COLLO 73016127
10 CAIZA D MAIPU CELSO CRUZ VALVERDE 71815700
11 MONTEAGUDO MAIPU HUGO BARRERO ZARATE 73421653
12 CABEZAS MAIPU GUALBERTO ALMENDRAS 753-35870
CORREO
wilsoncondorisca1991@gmail.com Dennis Vargas Equipo Mikrotik, 18/01/2017
poma016@hotmail.com Dennis Vargas llamar a las 17:00, para coordinar el trabajo
alvaro_dvq@hotmail.com Dennis Vargas Coordinado lunes 16/01/2017 , hrs 10:00
santos_e_m_t@yahoo.com Dennis Vargas coordinado para martes 10/01/2017 hrs 09:00 am
armanqv@hotmail.com Dennis Vargas Coordinado para miercoles 11/01/2017 hrs 09:00 am
jhobana_ibarr@hotmail.com Dennis Vargas Coordinado para miercoles 11/01/2017 hrs 15:10, tiene problem
germanycondori0209@gmail.com Dennis Vargas No cuentan con un equipo
sime_ra@msn.com Dennis Vargas Fijo ( 4-6-936104)
collo_siim@hotmail.com Dennis Vargas Edwin Calderon (técnico), coordinado para miercoles 11/01/2017
cruzv2707@hotmail.com Dennis Vargas Coordinado lunes 16/01/2017 , hrs 11:00 am
hugobz3012@hotmail.com Dennis Vargas Enviarán equipo a LA PAZ
gualb_13ingco@hotmail.com Dennis Vargas En receso, cordinado jueves 12 enero 09:00 hrs (68801659)
017 hrs 09:00 am
/2017 hrs 09:00 am
/2017 hrs 15:10, tiene problemas con su PC para acceder
Adeudan internet
nado para miercoles 11/01/2017 a hrs 10:30 am

rs 11:00 am
nero 09:00 hrs (68801659)

- G.A.M Referencia Telf Fecha de migracion
1 Mairana Orlando / Auria 71027905 3/29/2017
2 SORATA Erick chino 73556300 3/9/2017
3 Padcaya Jose Luis Gaspar 71893363 3/14/2017
4 Tarata Jhovanna 77428417 3/22/2017
5 entre_rios_oconnor Oscar Quenta 71572401 3/10/2017
6 riveralta Lenny 73997735 3/10/2017
7 SanJavier Darwin 75343352/39635001 3/27/2017
Migrado solo en el lado del RUAT
8 Puerto_Suarez 181.188.155.19 juan 76840775
El municipio no se comunicó hasta la fecha
9 TAPACARI 3/29/2017
10 LLALLAGUA Miguel Condori 74149337 3/8/2017
11 yacuma Alexis Ayala, Raul Luna 72910253 3/8/2017
12 CUATRO_CANADAS Jacob Flores 75547001 3/20/2017
13 pampa_grande Iver Montaño 72626939 3/10/2017
14 san_juan Rony 79056308 3/17/2017
15 Toco 200.58.82.191
16 San_pedro_de buenaVista 200.119.209.83
17 CLIZA Ariel / Alfonzo 68486534/71323788 3/21/2017
18 TOMINA NO es VPN L2L
ariel_claure@hotmail.com.ar
Les llegó la nota tarde.
enviaron equipo al RUAT para reconfiguracion 26/10/2017
admin/9635001
No les llegó la nota
200.58.82.166

Migracion VPN L2L

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Migracion VPN L2L

Uploaded by

Copyright:

Available Formats

VPN NAME_LAN LAN Phase 1

1 LAN_MUNI_PRUEBA 10.5.199.0 255.255.255.0 VPN_L2L_MUNICIPIO_PRUEBA

wan2 dhgrp 5 3des-sha1 186.121.211.27 shiba7608

1 LAN_ACHACACHI 10.5.38.0 /24 VPN_ACHACACHI

config vpn ipsec phase1

config vpn ipsec phase2

config vpn ipsec phase2

config firewall policy

config router static

dmz1(DMZ_MUNI)/10.7.1.189 192,168,150,189 172.17.18.189

dmz1(DMZ_MUNI)/10.7.1.57 172.21.20.57 172.17.18.57

PRODUCCION MUNICIPIOS VEHICULOS CONTRIBUYENTES

Business Object Produccion UGG

1 LAN_ACHACACHI 10.5.38.0 /24 VPN_ACHACACHI wan1

nado para miercoles 11/01/2017 a hrs 10:30 am

nero 09:00 hrs (68801659)

Les llegó la nota tarde.

enviaron equipo al RUAT para reconfiguracion 26/10/2017

No les llegó la nota

You might also like