You are on page 1of 3

HUB conf t int fa0/0 no shut ip address 172.16.1.1 255.255.255.

0 speed 100 duplex full

interface Tunnel0 ip address 192.168.1.1 255.255.255.0 tunnel source fa0/0 tunnel destination 172.16.1.11 interface Tunnel1 ip address 192.168.2.1 255.255.255.0 tunnel source fa0/0 tunnel destination 172.16.1.12 interface Tunnel2 ip address 192.168.3.1 255.255.255.0 tunnel source fa0/0 tunnel destination 172.16.1.13

crypto isakmp policy 1 authentication pre-share crypto isakmp key cisco123 address 0.0.0.0 no crypto isakmp key cisco123 address 172.16.1.11 no crypto isakmp key cisco123 address 172.16.1.12 no crypto isakmp key cisco123 address 172.16.1.13 ! crypto ipsec transform-set strong esp-3des esp-md5-hmac mode transport crypto map vpn 10 ipsec-isakmp set peer 172.16.1.11 set transform-set strong match address 130 crypto map vpn 20 ipsec-isakmp set peer 172.16.1.12 set transform-set strong match address 140 crypto map vpn 30 ipsec-isakmp set peer 172.16.1.13 set transform-set strong match address 150 conf t ip access-list extended 130 permit ip any any ip access-list extended 140 permit ip any any ip access-list extended 150 permit ip any any

router eigrp 60 network 192.168.0.0 0.0.255.255 auto-summary no eigrp log-neighbor-changes =============================Spoke 1============================== conf t int range fa0/0 no shut ip address 172.16.1.11 255.255.255.0 speed 100 duplex full interface Tunnel0 ip address 192.168.1.2 255.255.255.0 tunnel source fa0/0 tunnel destination 172.16.1.1 crypto isakmp policy 1 authentication pre-share crypto isakmp key cisco123 address 0.0.0.0 no crypto isakmp key cisco123 address 172.16.1.1 ! crypto ipsec transform-set strong esp-3des esp-md5-hmac mode transport crypto map vpn 10 ipsec-isakmp set peer 172.16.1.1 set transform-set strong match address 130 ip access-list extended 130 permit ip any any router eigrp 60 network 192.168.0.0 0.0.255.255 auto-summary no eigrp log-neighbor-changes =============================Spoke 2============================== conf t int fa0/0 no shut ip address 172.16.1.12 255.255.255.0 speed 100 duplex full interface Tunnel0 ip address 192.168.2.2 255.255.255.0 tunnel source fa0/0 tunnel destination 172.16.1.1 crypto isakmp policy 1 authentication pre-share

crypto isakmp key cisco123 address 0.0.0.0 no crypto isakmp key cisco123 address 172.16.1.1 ! crypto ipsec transform-set strong esp-3des esp-md5-hmac mode transport crypto map vpn 10 ipsec-isakmp set peer 172.16.1.1 set transform-set strong match address 130 ip access-list extended 130 permit ip any any router eigrp 60 network 192.168.0.0 0.0.255.255 auto-summary no eigrp log-neighbor-changes =============================Spoke 3============================== conf t int fa0/0 ip address 172.16.1.13 255.255.255.0 no shut speed 100 duplex full interface Tunnel0 ip address 192.168.3.2 255.255.255.0 tunnel source fa0/0 tunnel destination 172.16.1.1 crypto isakmp policy 1 authentication pre-share crypto isakmp key cisco123 address 0.0.0.0 no crypto isakmp key cisco123 address 172.16.1.1 ! crypto ipsec transform-set strong esp-3des esp-md5-hmac mode transport crypto map vpn 10 ipsec-isakmp set peer 172.16.1.1 set transform-set strong match address 130 ip access-list extended 130 permit ip any any router eigrp 60 network 192.168.0.0 0.0.255.255 auto-summary no eigrp log-neighbor-changes