Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About JoeSS8700
08-18-2017
JoeSS8700
Member since
11-08-2012
Beginner
10
Posts
0
Helpful
0
Solutions
Created by
JoeSS8700
in VPN and AnyConnect
in VPN and AnyConnect
11-11-2012
11:32 AM
11-11-2012
11:32 AM
Hey Piotr, I did what you said and changed the ACL around it and the VPN tunnel is working like it should now. Thank you for your help, I really appreciate it a lot. Its funny how some of the most challenging problems can be solved with a simple fix. Thanks Again.
... View more
Created by
JoeSS8700
in VPN and AnyConnect
in VPN and AnyConnect
11-11-2012
07:35 AM
11-11-2012
07:35 AM
How about vlans traffic going through the vpn tunnel? I don't know why I didn't mention this in the question because that is something I having issue with as well. Like I have a PC connect to a switch on the Main router side and its connect to VLAN 40, so I gave it a 172.16.40.13 address with a gateway of 172.16.40.1. On the Branch side the pc is connected to VLAN 30, so I gave it a 192.16.30.13 address with a gatewary of 172.16.30.1. I can ping between both pc's just fine no problem and ping the gateway as well. Shouldn't this traffic active the vpn tunnel and show up if I were to look at sh crypto isakmp sa?
... View more
Created by
JoeSS8700
in VPN and AnyConnect
in VPN and AnyConnect
11-10-2012
07:19 AM
11-10-2012
07:19 AM
Here is are the show ip route for both routers. Main Router 172.16.0.0/16 is variably subnetted, 8 subnets, 3 masks C 172.16.10.0/28 is directly connected, FastEthernet0/1.10 C 172.16.20.0/24 is directly connected, FastEthernet0/1.20 C 172.16.30.0/24 is directly connected, FastEthernet0/1.30 C 172.16.40.0/24 is directly connected, FastEthernet0/1.40 C 172.16.70.0/24 is directly connected, FastEthernet0/1.70 C 172.16.95.0/28 is directly connected, FastEthernet0/1.95 C 172.16.95.100/32 is directly connected, Loopback0 C 172.16.150.0/24 is directly connected, FastEthernet0/1.150 192.0.2.0/29 is subnetted, 1 subnets C 192.0.2.24 is directly connected, FastEthernet0/0 O IA 192.168.0.0/24 [110/2] via 192.0.2.27, 00:04:45, FastEthernet0/0 O IA 192.168.1.0/24 [110/2] via 192.0.2.27, 00:04:45, FastEthernet0/0 O IA 192.168.10.0/24 [110/2] via 192.0.2.27, 00:04:45, FastEthernet0/0 O IA 192.168.20.0/24 [110/2] via 192.0.2.27, 00:04:45, FastEthernet0/0 O IA 192.168.30.0/24 [110/2] via 192.0.2.27, 00:04:45, FastEthernet0/0 192.168.95.0/24 is variably subnetted, 2 subnets, 2 masks O IA 192.168.95.0/28 [110/2] via 192.0.2.27, 00:04:45, FastEthernet0/0 O IA 192.168.95.100/32 [110/2] via 192.0.2.27, 00:04:45, FastEthernet0/0 O IA 192.168.150.0/24 [110/2] via 192.0.2.27, 00:04:45, FastEthernet0/0 Branch Router 172.16.0.0/16 is variably subnetted, 8 subnets, 3 masks O IA 172.16.10.0/28 [110/2] via 192.0.2.25, 00:02:22, FastEthernet0/0 O IA 172.16.20.0/24 [110/2] via 192.0.2.25, 00:02:22, FastEthernet0/0 O IA 172.16.30.0/24 [110/2] via 192.0.2.25, 00:02:22, FastEthernet0/0 O IA 172.16.40.0/24 [110/2] via 192.0.2.25, 00:02:22, FastEthernet0/0 O IA 172.16.70.0/24 [110/2] via 192.0.2.25, 00:02:22, FastEthernet0/0 O IA 172.16.95.0/28 [110/2] via 192.0.2.25, 00:02:22, FastEthernet0/0 O IA 172.16.95.100/32 [110/2] via 192.0.2.25, 00:02:22, FastEthernet0/0 O IA 172.16.150.0/24 [110/2] via 192.0.2.25, 00:02:22, FastEthernet0/0 192.0.2.0/29 is subnetted, 1 subnets C 192.0.2.24 is directly connected, FastEthernet0/0 C 192.168.0.0/24 is directly connected, FastEthernet0/1 C 192.168.1.0/24 is directly connected, FastEthernet0/1.1 C 192.168.10.0/24 is directly connected, FastEthernet0/1.10 C 192.168.20.0/24 is directly connected, FastEthernet0/1.20 C 192.168.30.0/24 is directly connected, FastEthernet0/1.30 192.168.95.0/24 is variably subnetted, 2 subnets, 2 masks C 192.168.95.0/28 is directly connected, FastEthernet0/1.95 C 192.168.95.100/32 is directly connected, Loopback0 C 192.168.150.0/24 is directly connected, FastEthernet0/1.150
... View more
Created by
JoeSS8700
in VPN and AnyConnect
in VPN and AnyConnect
11-09-2012
06:36 PM
11-09-2012
06:36 PM
ok, I what I did was do a tracert from a pc on both networks and they both show that they are routing propertly across the interface. Plus i don't see how it could route across a different path because there is just one path which is across the cable that connects the two routers.
... View more
Created by
JoeSS8700
in VPN and AnyConnect
in VPN and AnyConnect
11-09-2012
08:27 AM
11-09-2012
08:27 AM
Alright, I removed the crypto map on the fa0/1 interface of both routers. I also tired pinging something from the 172.16.0.x subnet and I was able to ping just fine. I can pretty much ping across almost any where with a problem. Which confuses me more of why the VPN tunnel isn't showing up and why nothing shows in sh crypto idakmp sa.
... View more
Created by
JoeSS8700
in VPN and AnyConnect
in VPN and AnyConnect
11-08-2012
05:11 PM
11-08-2012
05:11 PM
Ok, so I'm am trying to figure out why I can't get nothing to show up when I do sh crypto isakmp sa or sh crypto ipsec sa. I did the basic setup for a site to site vpn and I can ping across both networks just fine no problem. So when I ping from a pc in the 172.16.0.0 network to 192.168.0.0 network there is no problem at all because the pings are recieved just fine. But when I go to sh crypto isakmp sa, there is just nothing there and I can't for the life of me figure out why. I looked at my sh run for both routers and everything looks fine, but I guess I may be overlooking something. If someone could help me diagnose this problem I would truely appreciate. I have attached my packet tracer file and both routers are using the password binary. I also have the sh run of both routers also attached.
... View more
Labels:
Created by
JoeSS8700
in VPN and AnyConnect
in VPN and AnyConnect
11-08-2012
12:52 PM
11-08-2012
12:52 PM
Anyone have any clues of what I'm doing wrong?
... View more
Created by
JoeSS8700
in VPN and AnyConnect
in VPN and AnyConnect
11-08-2012
10:05 AM
11-08-2012
10:05 AM
Router Branch hostname Rbranch ! ! ! enable secret 5 $1$KFpd$ZTYwy8CoWVhjvBXiDDoQx0 ! ! ! ip dhcp pool ITS network 192.168.150.0 255.255.255.0 default-router 192.168.150.1 option 150 ip 192.168.150.1 ! ! ! username ciscosdm privilege 15 password 0 ciscosdm ! crypto isakmp policy 2 encr aes 128 authentication pre-share group 2 ! crypto isakmp key binary address 192.0.2.25 ! ! crypto ipsec transform-set yasser esp-aes 128 esp-sha-hmac ! crypto map vader 100 ipsec-isakmp set peer 192.0.2.25 set pfs group2 set transform-set yasser match address S2S-VPN-TRAFFIC ! ! ! no ip domain-lookup ! ! spanning-tree mode pvst ! ! ! ! interface Loopback0 ip address 192.168.95.100 255.255.255.255 ! interface FastEthernet0/0 ip address 192.0.2.27 255.255.255.248 duplex auto speed auto crypto map vader ! interface FastEthernet0/1 ip address 192.168.0.1 255.255.255.0 duplex auto speed auto ! interface FastEthernet0/1.1 encapsulation dot1Q 1 native ip address 192.168.1.1 255.255.255.0 ! interface FastEthernet0/1.10 encapsulation dot1Q 10 ip address 192.168.10.1 255.255.255.0 ! interface FastEthernet0/1.20 encapsulation dot1Q 20 ip address 192.168.20.1 255.255.255.0 ! interface FastEthernet0/1.30 encapsulation dot1Q 30 ip address 192.168.30.1 255.255.255.0 ! interface FastEthernet0/1.95 encapsulation dot1Q 95 ip address 192.168.95.1 255.255.255.240 ! interface FastEthernet0/1.150 encapsulation dot1Q 150 ip address 192.168.150.1 255.255.255.0 ! interface Serial0/0/0 ip address 10.0.0.2 255.255.255.252 clock rate 2000000 shutdown ! interface Serial0/0/1 ip address 10.0.0.6 255.255.255.252 ip ospf priority 128 clock rate 2000000 shutdown ! interface Serial0/1/0 no ip address clock rate 2000000 shutdown ! interface Serial0/1/1 no ip address clock rate 2000000 shutdown ! interface FastEthernet1/0 switchport mode access shutdown ! interface FastEthernet1/1 switchport mode access shutdown ! interface FastEthernet1/2 switchport mode access shutdown ! interface FastEthernet1/3 switchport mode access shutdown ! interface FastEthernet1/4 switchport mode access shutdown ! interface FastEthernet1/5 switchport mode access shutdown ! interface FastEthernet1/6 switchport mode access shutdown ! interface FastEthernet1/7 switchport mode access shutdown ! interface FastEthernet1/8 switchport mode access shutdown ! interface FastEthernet1/9 switchport mode access shutdown ! interface FastEthernet1/10 switchport mode access shutdown ! interface FastEthernet1/11 switchport mode access shutdown ! interface FastEthernet1/12 switchport mode access shutdown ! interface FastEthernet1/13 switchport mode access shutdown ! interface FastEthernet1/14 switchport mode access shutdown ! interface FastEthernet1/15 switchport mode access shutdown ! interface Vlan1 no ip address shutdown ! router ospf 1 log-adjacency-changes network 10.0.0.0 0.0.0.3 area 0 network 10.0.0.4 0.0.0.3 area 0 network 192.0.2.24 0.0.0.7 area 0 network 192.168.0.0 0.0.0.255 area 2 network 192.168.1.0 0.0.0.255 area 2 network 192.168.10.0 0.0.0.255 area 2 network 192.168.20.0 0.0.0.255 area 2 network 192.168.30.0 0.0.0.255 area 2 network 192.168.95.0 0.0.0.15 area 2 network 192.168.95.100 0.0.0.0 area 2 network 192.168.100.0 0.0.0.3 area 2 network 192.168.150.0 0.0.0.255 area 2 default-information originate ! ip classless ip default-network 10.0.0.0 ip default-network 192.168.100.0 ! ! ip access-list extended S2S-VPN-TRAFFIC permit ip 192.168.0.0 0.0.0.255 172.16.0.0 0.0.0.255 ! ! ! ! ! dial-peer voice 150 voip destination-pattern 10.. session target ipv4:172.16.150.1 ! telephony-service max-ephones 30 max-dn 30 ip source-address 192.168.150.1 port 2000 auto assign 1 to 30 ! ephone 1 device-security-mode none mac-address 0008.E399.DC43 type 7960 ! ephone 2 device-security-mode none mac-address 000D.287E.3A28 type 7960 ! ephone 3 device-security-mode none ! ephone 4 device-security-mode none ! ephone 5 device-security-mode none ! ephone 6 device-security-mode none ! ephone 7 device-security-mode none ! ephone 8 device-security-mode none ! ephone 9 device-security-mode none ! ephone 10 device-security-mode none ! ephone 11 device-security-mode none ! ephone 12 device-security-mode none ! ephone 13 device-security-mode none ! ephone 14 device-security-mode none ! ephone 15 device-security-mode none ! ephone 16 device-security-mode none ! ephone 17 device-security-mode none ! ephone 18 device-security-mode none ! ephone 19 device-security-mode none ! ephone 20 device-security-mode none ! ephone 21 device-security-mode none ! ephone 22 device-security-mode none ! ephone 23 device-security-mode none ! ephone 24 device-security-mode none ! ephone 25 device-security-mode none ! ephone 26 device-security-mode none ! ephone 27 device-security-mode none ! ephone 28 device-security-mode none ! ephone 29 device-security-mode none ! ephone 30 device-security-mode none ! line con 0 exec-timeout 90 0 password binary logging synchronous login line vty 0 4 password binary login local ! ! ! end
... View more
Created by
JoeSS8700
in VPN and AnyConnect
in VPN and AnyConnect
11-08-2012
10:02 AM
11-08-2012
10:02 AM
Here are the show runs for both routers Router Main A hostname RmainA ! ! ! ! ! ip dhcp pool ITS network 172.16.150.0 255.255.255.0 default-router 172.16.150.1 option 150 ip 172.16.150.1 ! ! ! username ciscosdm privilege 15 password 0 ciscosdm ! crypto isakmp policy 2 encr aes 128 authentication pre-share group 2 ! crypto isakmp key binary address 192.0.2.27 ! ! crypto ipsec transform-set yasser esp-aes 128 esp-sha-hmac ! crypto map vader 100 ipsec-isakmp set peer 192.0.2.27 set pfs group2 set transform-set yasser match address S2S-VPN-TRAFFIC ! ! ! no ip domain-lookup ! ! spanning-tree mode pvst ! ! ! ! interface Loopback0 ip address 172.16.95.100 255.255.255.255 ! interface FastEthernet0/0 ip address 192.0.2.25 255.255.255.248 duplex auto speed auto crypto map vader ! interface FastEthernet0/0.1 no ip address ! interface FastEthernet0/1 description TRUNK TO MAIN SWITCH A no ip address duplex auto speed auto ! interface FastEthernet0/1.10 encapsulation dot1Q 10 ip address 172.16.10.1 255.255.255.240 ! interface FastEthernet0/1.20 encapsulation dot1Q 20 ip address 172.16.20.1 255.255.255.0 ! interface FastEthernet0/1.30 encapsulation dot1Q 30 ip address 172.16.30.1 255.255.255.0 ! interface FastEthernet0/1.40 encapsulation dot1Q 40 ip address 172.16.40.1 255.255.255.0 ! interface FastEthernet0/1.70 encapsulation dot1Q 70 ip address 172.16.70.1 255.255.255.0 ! interface FastEthernet0/1.95 encapsulation dot1Q 95 ip address 172.16.95.1 255.255.255.240 ! interface FastEthernet0/1.100 encapsulation dot1Q 100 ip address 172.16.100.1 255.255.255.0 shutdown ! interface FastEthernet0/1.150 encapsulation dot1Q 150 ip address 172.16.150.1 255.255.255.0 ! interface Serial0/0/0 description TO BRANCH ip address 10.0.0.1 255.255.255.252 clock rate 64000 shutdown ! interface Serial0/0/1 no ip address clock rate 125000 shutdown ! interface Serial0/1/0 no ip address clock rate 2000000 shutdown ! interface Serial0/1/1 no ip address clock rate 2000000 shutdown ! interface FastEthernet1/0 switchport mode access shutdown ! interface FastEthernet1/1 switchport mode access shutdown ! interface FastEthernet1/2 switchport mode access shutdown ! interface FastEthernet1/3 switchport mode access shutdown ! interface FastEthernet1/4 switchport mode access shutdown ! interface FastEthernet1/5 switchport mode access shutdown ! interface FastEthernet1/6 switchport mode access shutdown ! interface FastEthernet1/7 switchport mode access shutdown ! interface FastEthernet1/8 switchport mode access shutdown ! interface FastEthernet1/9 switchport mode access shutdown ! interface FastEthernet1/10 switchport mode access shutdown ! interface FastEthernet1/11 switchport mode access shutdown ! interface FastEthernet1/12 switchport mode access shutdown ! interface FastEthernet1/13 switchport mode access shutdown ! interface FastEthernet1/14 switchport mode access shutdown ! interface FastEthernet1/15 switchport mode access shutdown ! interface Vlan1 no ip address shutdown ! router ospf 1 log-adjacency-changes network 10.0.0.0 0.0.0.3 area 0 network 192.0.2.24 0.0.0.7 area 0 network 172.16.0.0 0.0.0.255 area 1 network 172.16.1.0 0.0.0.255 area 1 network 172.16.10.0 0.0.0.255 area 1 network 172.16.20.0 0.0.0.255 area 1 network 172.16.30.0 0.0.0.255 area 1 network 172.16.70.0 0.0.0.255 area 1 network 172.16.95.1 0.0.0.0 area 1 network 172.16.95.0 0.0.0.15 area 1 network 172.16.100.0 0.0.0.3 area 1 network 172.16.150.0 0.0.0.255 area 1 network 0.0.0.0 255.255.255.255 area 1 default-information originate ! ip classless ip default-network 10.0.0.0 ! ! ip access-list extended S2S-VPN-TRAFFIC permit ip 172.16.0.0 0.0.0.255 192.168.0.0 0.0.0.255 ! ! ! ! ! dial-peer voice 150 voip destination-pattern 20.. session target ipv4:192.168.150.1 ! telephony-service max-ephones 30 max-dn 30 ip source-address 172.16.150.1 port 2000 auto assign 1 to 30 ! ephone 1 device-security-mode none mac-address 0014.6AAC.2355 type 7960 ! ephone 2 device-security-mode none ! ephone 3 device-security-mode none ! ephone 4 device-security-mode none ! ephone 5 device-security-mode none ! ephone 6 device-security-mode none ! ephone 7 device-security-mode none ! ephone 8 device-security-mode none ! ephone 9 device-security-mode none ! ephone 10 device-security-mode none ! ephone 11 device-security-mode none ! ephone 12 device-security-mode none ! ephone 13 device-security-mode none ! ephone 14 device-security-mode none ! ephone 15 device-security-mode none ! ephone 16 device-security-mode none ! ephone 17 device-security-mode none ! ephone 18 device-security-mode none ! ephone 19 device-security-mode none ! ephone 20 device-security-mode none ! ephone 21 device-security-mode none ! ephone 22 device-security-mode none ! ephone 23 device-security-mode none ! ephone 24 device-security-mode none ! ephone 25 device-security-mode none ! ephone 26 device-security-mode none ! ephone 27 device-security-mode none ! ephone 28 device-security-mode none ! ephone 29 device-security-mode none ! ephone 30 device-security-mode none ! line con 0 exec-timeout 90 0 password binary logging synchronous login line vty 0 4 password binary login local ! ! ! end
... View more
Created by
JoeSS8700
in VPN and AnyConnect
in VPN and AnyConnect
11-08-2012
09:59 AM
11-08-2012
09:59 AM
Ok, so I'm am trying to figure out why I can't get nothing to show up when I do sh crypto isakmp sa or sh crypto ipsec sa. I did the basic setup for a site to site vpn and I can ping across both networks just fine no problem. So when I ping from a pc in the 172.16.0.0 network to 192.168.0.0 network there is no problem at all because the pings are recieved just fine. But when I go to sh crypto isakmp sa, there is just nothing there and I can't for the life of me figure out why. I looked at my sh run for both routers and everything looks fine, but I guess I may be overlooking something. If someone could help me diagnose this problem I would truely appreciate. I have attached my packet tracer file and both routers are using the password binary. I put the password on there for the sake of it and to have a more real feel.
... View more
Labels:
Created by
JoeSS8700
in VPN and AnyConnect
11-11-2012 11:32 AM
11-11-2012 11:32 AM
Hey Piotr, I did what you said and changed the ACL around it and the VPN
tunnel is working like it s...
Created by
JoeSS8700
in VPN and AnyConnect
11-11-2012 07:35 AM
11-11-2012 07:35 AM
How about vlans traffic going through the vpn tunnel? I don't know why I
didn't mention this in the ...
Created by
JoeSS8700
in VPN and AnyConnect
11-10-2012 07:19 AM
11-10-2012 07:19 AM
Here is are the show ip route for both routers. Main Router
172.16.0.0/16 is variably subnetted, 8 s...
Created by
JoeSS8700
in VPN and AnyConnect
11-09-2012 06:36 PM
11-09-2012 06:36 PM
ok, I what I did was do a tracert from a pc on both networks and they
both show that they are routin...
Created by
JoeSS8700
in VPN and AnyConnect
11-09-2012 08:27 AM
11-09-2012 08:27 AM
Alright, I removed the crypto map on the fa0/1 interface of both
routers. I also tired pinging somet...
Created by
JoeSS8700
in VPN and AnyConnect
11-08-2012 05:11 PM
11-08-2012 05:11 PM
Ok, so I'm am trying to figure out why I can't get nothing to show up
when I do sh crypto isakmp sa ...
Created by
JoeSS8700
in VPN and AnyConnect
11-08-2012 12:52 PM
11-08-2012 12:52 PM
Anyone have any clues of what I'm doing wrong?
Created by
JoeSS8700
in VPN and AnyConnect
11-08-2012 10:05 AM
11-08-2012 10:05 AM
Router Branchhostname Rbranch!!!enable secret 5
$1$KFpd$ZTYwy8CoWVhjvBXiDDoQx0!!!ip dhcp pool ITS ne...
Created by
JoeSS8700
in VPN and AnyConnect
11-08-2012 10:02 AM
11-08-2012 10:02 AM
Here are the show runs for both routers Router Main A hostname
RmainA!!!!!ip dhcp pool ITS network 1...
Created by
JoeSS8700
in VPN and AnyConnect
11-08-2012 09:59 AM
11-08-2012 09:59 AM
Ok, so I'm am trying to figure out why I can't get nothing to show up
when I do sh crypto isakmp sa ...
Public Statistics
| Date Registered | 11-08-2012 09:42 AM |
| Date Last Visited | 08-18-2017 03:53 AM |
| Total Messages Posted | 10 |
