About alanchia2000

alanchia2000 · 03-21-2016

Hi Does QM_IDLE mean that phase 1 & phase 2 has been established? Or does it just mean phase 1 have been established? cisco-pre-mmh#show cry isa saIPv4 Crypto ISAKMP SAdst src state conn-id status10.2.0.1 200.84....

alanchia2000 · 12-29-2015

Hi, I will be building a site to site IPSEC VPN tunnel with an external party who is using a dynamic IP address. He is using dyndns to associate a domain to the IP. May I know what are the issues of having a remote party using dynamic IP address? Doe...

alanchia2000 · 12-01-2015

Hi, I would like to set up NAT on a stick. How can I do it on CSR 1000v? Any working examples would be good. policy route-map command is what people have commonly use to NAT traffic based on destination. However, the command is not available on C...

alanchia2000 · 11-30-2015

Hi, I have set up Cisco CSR 1000v on Amazon cloud (RouterA).Another IPSec device, pfsense - 123.123.123, was also set up on Amazon cloud. I am having issues connecting CSR to pfsense, mainly because pfsense is taking the peer identity as 10.2.0.132 i...

alanchia2000 · 11-10-2015

We have many remote VPN partners connecting to us using IPSEC. Only 1 active CSR (10.4.0.0/24) would be active. Traffic is first initiated from one of our web servers (www1 & www2) to the remote servers (192.168.1.1/32, 172.16.1.1/32) using the acti...

alanchia2000 · 03-22-2016

Am I right in saying that once you see a set of negotiated crypto settings in "show cry ipsec sa". That means phase 2 is up? What if the encryption domain is wrong? Would phase 2 be still up?

alanchia2000 · 12-29-2015

Remote party - CyberRoam CR-200i Me - Cisco CSR 1000v

alanchia2000 · 12-10-2015

Anyone able to advise on this ?

alanchia2000 · 12-09-2015

Hi It seems to give me different error messages when i change the remote peer ID to private address: ! 122.122.122.122 (Router A) - internal IP 10.2.0.132! 123.123.123.123 (Router B) - internal IP 10.4.0.241 pfsense logs Dec 9 08:41:00 pfSense char...

alanchia2000 · 12-06-2015

I am using CSR 1000v on Amazon to establish IPSEC VPN tunnels with remote VPN partners. Some may require us to perform source NATing prior to sending it through the tunnel. Any advice on how I can do that ?

Member Since	‎01-17-2005 12:42 AM
Date Last Visited	‎08-18-2017 06:44 PM
Posts	133

User Statistics

User Activity

IPSEC questions

Remote party uses dynamic IP for site to site VPN - Any issues ?

NAT on a stick with CSR 1000v on Amazon

Unable to establish IPsec connections to remote VPN server

HA Cisco CSR 1000v is unable to failover transparently on AWS cloud

Am I right in saying that

Remote party - CyberRoam CR

Anyone able to advise on this

Hi

I am using CSR 1000v on