Could somebody explain me why on both sides of VPN tunnel are the same source and destination addresses? It shouldn't be change in this and on R4 should be dst=212.26.100.2 src=197.4.55.2? ISAKMP creates 2 one-way connections, not one, and here is on...
If i set lifetime for phase 1 ISAKMP equal 3600 seconds, has it sense to set PFS and lifetime for phase 2 IPSec equal 3600 seconds? I understand it's sufficently to set only PFS and lifetime of phase 2, because anyhow after 3600 sec. PFS enforces new...
I don't understand why durning pinging from Router9 to PC1, R2 after NAT transaltion additionaly match the packet to IPSec transform map. The packet should leave out R2 without encryption. Where is a trap? Thanks in advance.
Here is most important ...
I would like to configure redistribution of routing protocols but first i need to do an OSPF routing between R0 and R2 via tunnel GRE.
Routers connect a neigbourhood but only for a while. Tunnel GRE is ok. Where is a problem?
Alerts are shown firs...
I would like to configure OSPF and EIGRP redistribution on routers R0 and R1 via tunnel gre, like in the scheme.
I will be greatful for help in configuration.
Below is actual R0 and R2 configuration
R0
interface Loopback0ip address 10.0.0.1 255....
Ok, what in case when phase1 is greater than phase2? Is it lifetime of phase1 has any meaning? Because when lifetime of phase2 expires then new phase1 is enforced.
You are right it's GRE over IPSec.Traffics are directed to tunnel interface, Traces come from OSPF routing. I attached file project from Packet Tracer so you can look at it.
I can write line: access-list 100 permit GRE host 192.168.0.6 host 192.168.0...
Yes, remove of default-information originate resolves the problem and OSPF works stably.
So now local routers behind R2 need to know route to INTERNET by write gateway of last resort on both routers .
Thank you master once again! I feel it was not l...
