IPsec between two routers connected via vlan

[s.georgiev]

Hi people :)

I need advise how to configure ipsec between two routers shown on the attached file.

I'm confused about  "mach" parameter in the Crypto map.

[Rob Ingram]

Hi,
The "match" (I assume that's what you are referring to) command in the crypto map references an ACL, this ACL is used to identify "interesting traffic", in other words traffic you want encrypting and sent over the VPN tunnel. E.g:-

ip access-list extended ASA_VPN
permit ip 10.10.0.0 0.0.3.255 10.20.0.0 0.0.3.255

crypto map CM 10 ipsec-isakmp
match address ASA_VPN

There would obviously be other values defined under the crypto map.

HTH

[s.georgiev]

Hi, i know the function of "match" , i need help for the ACL. 

For example:

 RT2

ip access-list extended IPsec RT2
permit ip 192.168.10.0 0.0.0.255 0.0.0.0 0.0.0.0

permit ip 192.168.11.0 0.0.0.255 0.0.0.0 0.0.0.0

permit ip 192.168.12.0 0.0.0.255 0.0.0.0 0.0.0.0

permit ip 192.168.13.0 0.0.0.255 0.0.0.0 0.0.0.0

permit ip 192.168.14.0 0.0.0.255 0.0.0.0 0.0.0.0

RT1

ip access-list extended IPsec RT1

permit ip 0.0.0.0 0.0.0.0 192.168.10.0 0.0.0.255

permit ip 0.0.0.0 0.0.0.0 192.168.11.0 0.0.0.255

permit ip 0.0.0.0 0.0.0.0 192.168.12.0 0.0.0.255

permit ip 0.0.0.0 0.0.0.0 192.168.13.0 0.0.0.255

permit ip 0.0.0.0 0.0.0.0 192.168.14.0 0.0.0.255

 Do you think it will work as it does now?