9.0r2 VPN IPSEC site-to-site tunnel via pre-shared key

Router-2

XSR-1805_2#show running-config

!!

!Version 4.0.0.0, Built Mar 26 2003, 19:47:17

hostname XSR-1805_2

crypto isakmp proposal prop-map1 authentication pre-share

group 5 lifetime 10800

access-list 101 permit ip 80.80.80.0 0.0.0.255 10.10.10.0 0.0.0.255

crypto isakmp peer 20.20.20.1 255.255.255.255 proposal prop-map1

config-mode gateway

crypto ipsec transform-set VPN-3des esp-3des esp-sha-hmac set pfs group2

set security-association lifetime kilobytes 1000000 set security-association lifetime seconds 3601

crypto map c-map1 75

set transform-set VPN-3des match address 101

set peer 20.20.20.1 mode tunnel

interface FastEthernet1 description "LAN-Interface1"

ip address 80.80.80.1 255.255.255.0 no shutdown

interface FastEthernet2 description "LAN-Interface2" crypto map c-map1

ip address 20.20.20.2 255.255.255.0 no shutdown

ip route 10.10.10.0 255.255.255.0 20.20.20.1

end

XSR-1805_2#

XSR-1805_2(config)#aaa user 20.20.20.1

XSR-1805_2(config-aaa)#password XSR

Configuration Guide

Page 32 of 55

Page 32
Image 32
Enterasys Networks XSR-Series manual 0r2 VPN Ipsec site-to-site tunnel via pre-shared key, Router-2