Cisco Systems OL-6426-02 manual Configuration Example

Chapter 7 Configuring VPNs Using an IPSec Tunnel and Generic Routing Encapsulation

Configuration Example

BETA DRAFT - CISCO CONFIDENTIAL

Configuration Example

The following configuration example shows a portion of the configuration file for a VPN using a GRE tunnel scenario described in the preceding sections.

!

aaanew-model

!

aaa authentication login rtr-remote local aaa authorization network rtr-remote local aaa session-id common

!

username cisco password 0 cisco

!

interface tunnel 1

ip address 10.62.1.193 255.255.255.252

tunnel source fastethernet 2

tunnel destination interface 192.168.101.1

ip route 20.20.20.0 255.255.255.0 tunnel 1

crypto isakmp policy 1 encryption 3des authentication pre-share group 2

!

crypto isakmp client configuration group rtr-remote key secret-password

dns 10.50.10.1 10.60.10.1 domain company.com

pool dynpool

!

crypto ipsec transform-set vpn1 esp-3des esp-sha-hmac

!

crypto ipsec security-association lifetime seconds 86400

!

crypto dynamic-map dynmap 1 set transform-set vpn1 reverse-route

!

crypto map static-map 1 ipsec-isakmp dynamic dynmap crypto map dynmap isakmp authorization list rtr-remote crypto map dynmap client configuration address respond

!

crypto isakmp policy 1 ! defines the key association and authentication for ipsec tunnel. hash md5

authentication pre-share

crypto isakmp key cisco123 address 200.1.1.1

!

!

crypto ipsec transform-set set1 esp-3des esp-md5-hmac ! defines encryption and transform set for the ipsec tunnel.

!

crypto map to_corporate 1 ipsec-isakmp ! associates all crypto values and peering address for the ipsec tunnel.

set peer 200.1.1.1

set transform-set set1

		match address	105
!
!!
		interface vlan	1 ! VLAN 1 is the internal home network
		Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide
	7-10		OL-6426-02