Peace.
I'm trying to do vpn between two routers.
The first router model 1841
His dial settings is like this:
crypto isakmp policy 1
encr aes
authentication pre-share
group 2
!
crypto map hakim_to_yoni 10 ipsec-isakmp
set peer 81.218.161.32
set transform-set hakim_to_yoni
match address 101
!
interface FastEthernet0/1.200
ip mtu 1300
crypto map hakim_to_yoni
!
crypto map yoni_to_hakim 10 ipsec-isakmp
set peer 82.80.137.216
set transform-set yoni_to_hakim
match address 101
!
crypto isakmp policy 1
encr aes
authentication pre-share
group 2
!
crypto isakmp key 6 cisco address 81.218.161.32
crypto ipsec transform-set hakim_to_yoni esp-aes esp-sha-hmac
crypto map hakim_to_yoni 10 ipsec-isakmp
set peer 81.218.161.32
set transform-set hakim_to_yoni
match address 101
!
interface FastEthernet0/1.200
ip mtu 1300
crypto map hakim_to_yoni
!
access-list 101 permit ip 10.80.5.0 0.0.0.255 192.168.185.0 0.0.0.25
my other is model c850
crypto isakmp key 6 cisco address 82.80.137.216
crypto ipsec transform-set yoni_to_hakim esp-aes esp-sha-hmac
crypto map yoni_to_hakim 10 ipsec-isakmp
set peer 82.80.137.216
set transform-set yoni_to_hakim
match address 101
!
interface Tunnel40
ip address 192.168.205.1 255.255.255.0
crypto map yoni_to_hakim
!
access-list 101 permit ip 192.168.185.0 0.0.0.255 192.168.205.0 0.0.0.255
when i do:
show crypto session
Interface: FastEthernet0/1.200
Session status: DOWN
Peer: 81.218.161.32 port 500
IPSEC FLOW: permit ip 192.168.205.0/255.255.255.0 192.168.185.0/255.255.255.0
Active SAs: 0, origin: crypto map
IPSEC FLOW: permit ip 10.80.5.0/255.255.255.0 192.168.185.0/255.255.255.0
Active SAs: 0, origin: crypto map
Interface: FastEthernet0/1.200
Session status: DOWN
Peer: 81.218.161.32 port 500
IPSEC FLOW: permit ip 192.168.205.0/255.255.255.0 192.168.185.0/255.255.255.0
Active SAs: 0, origin: crypto map
IPSEC FLOW: permit ip 10.80.5.0/255.255.255.0 192.168.185.0/255.255.255.0
Active SAs: 0, origin: crypto map
