Scribd Logo
Upload

Welcome to Scribd!

  • ACL Commands

    Uploaded by

    Kyaw Zin Nyein
    4 views1 page
    The document describes the configuration of an IPSec VPN between routers R1 and BR1. Access control lists are created to permit traffic between the 192.168.70.0/26 and 192.168.0.0/24 networks. IKEv1 is configured with pre-shared keys to establish security associations using AES-256 encryption and SHA-HMAC authentication. Crypto maps are configured on each router to apply the IPSec policies and match the appropriate access lists.

    Original Description:

    Copyright

    © © All Rights Reserved

    Available Formats

    TXT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    The document describes the configuration of an IPSec VPN between routers R1 and BR1. Access control lists are created to permit traffic between the 192.168.70.0/26 and 192.168.0.0/24 networks. IKEv1 is configured with pre-shared keys to establish security associations using AES-256 encryption and SHA-HMAC authentication. Crypto maps are configured on each router to apply the IPSec policies and match the appropriate access lists.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    4 views1 page

    ACL Commands

    Uploaded by

    Kyaw Zin Nyein
    The document describes the configuration of an IPSec VPN between routers R1 and BR1. Access control lists are created to permit traffic between the 192.168.70.0/26 and 192.168.0.0/24 networks. IKEv1 is configured with pre-shared keys to establish security associations using AES-256 encryption and SHA-HMAC authentication. Crypto maps are configured on each router to apply the IPSec policies and match the appropriate access lists.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 1

    ACL commands

    ---------------------------------
    (x2) access-list 100 deny ip 192.168.70.0 0.0.0.63 host 192.168.100.5
    access-list 100 permit ip any any (x2)
    ----------------------------------

    int fa0/1.70 (fa0/0.70)


    access-group 100 in
    -----------------------------------------

    Ipsec
    ON R3#
    access-list 110 permit ip 192.168.70.0 0.0.0.63 192.168.0.0 0.0.0.255

    crypto isakmp policy 10


    encryption aes 256
    authentication pre-share
    group 5
    exit
    crypto isakmp key (*vpnpa55*) address 200.0.0.2

    crypto ipsec transform-set VPN-SET esp-aes esp-sha-hmac

    R1(config)# crypto map VPN-MAP 10 ipsec-isakmp


    R1(config-crypto-map)# description VPN connection to BR1
    R1(config-crypto-map)# set peer 200.0.0.2
    R1(config-crypto-map)# set transform-set VPN-SET
    R1(config-crypto-map)# match address 110
    R1(config-crypto-map)# exit

    R1(config)# interface s0/1/0


    R1(config-if)# crypto map VPN-MAP

    ---------------------------------------------------
    On BR1 router
    (config)# access-list 110 permit ip 192.168.0.0 0.0.0.255 192.168.70.0 0.0.0.63
    BR1(config)# crypto isakmp policy 10
    BR1(config-isakmp)# encryption aes 256
    BR1(config-isakmp)# authentication pre-share
    BR1(config-isakmp)# group 5
    BR1(config-isakmp)# exit
    BR1(config)# crypto isakmp key vpnpa55 address 100.0.0.1
    BR1(config)# crypto ipsec transform-set VPN-SET esp-aes esp-sha-hmac

    BR1(config)# crypto map VPN-MAP 10 ipsec-isakmp


    BR1(config-crypto-map)# description VPN connection to R3
    BR1(config-crypto-map)# set peer 100.0.0.1
    BR1(config-crypto-map)# set transform-set VPN-SET
    BR1(config-crypto-map)# match address 110
    BR1(config-crypto-map)# exit

    R3(config)# interface s0/3/1


    R3(config-if)# crypto map VPN-MA

    #show crypto ipsec sa

    You might also like