Hi all,
Can someone help verify what is wrong with the config below for point to point vpn:
hostname B5_NP_RTR
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
ip cef
!
no ip domain lookup
ip domain name lab.local
!!
crypto isakmp policy 10
encr aes 256
authentication pre-share
group 2
crypto isakmp key 6 uccmskey address 192.168.207.97
crypto isakmp keepalive 90
!
!
crypto ipsec transform-set to_PC esp-aes 256
crypto ipsec df-bit clear
!
crypto map NP_PC local-address FastEthernet0/0
crypto map NP_PC 10 ipsec-isakmp
set peer 192.168.207.97
set transform-set to_PC
match address 101
!
interface Tunnel3
ip address 172.16.0.17 255.255.255.252
no ip redirects
no ip unreachables
no ip proxy-arp
tunnel source 192.168.207.98
tunnel destination 192.168.207.97
!
interface FastEthernet0/0
description Link to PC
ip address 192.168.207.98 255.255.255.252
duplex auto
speed auto
crypto map NP_PC
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
ip route 0.0.0.0 0.0.0.0 172.16.0.18
!
!
no ip http server
no ip http secure-server
!
access-list 101 permit ip any any
!
control-plane!
!
!line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
!
end
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
hostname L5_PC_RTR
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
ip cef
!
!
!
!
no ip domain lookup
ip domain name lab.local
!
!
crypto isakmp policy 10
encr aes 256
authentication pre-share
group 2
crypto isakmp key 6 uccmskey address 192.168.207.98
crypto isakmp keepalive 90
!
!
crypto ipsec transform-set to_NPPK esp-aes 256
crypto ipsec df-bit clear
!
crypto map PC_NP local-address FastEthernet0/0
crypto map PC_NP 10 ipsec-isakmp
set peer 192.168.207.98
set transform-set to_NP
match address 101
!
interface Tunnel3
ip address 172.16.0.18 255.255.255.252
no ip redirects
no ip unreachables
no ip proxy-arp
tunnel source 192.168.207.97
tunnel destination 192.168.207.98
!
interface FastEthernet0/0
description Link to NP
ip address 192.168.207.97 255.255.255.252
duplex auto
speed auto
crypto map PC_NP
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
!
no ip http server
no ip http secure-server
!
access-list 101 permit ip any any
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
!
end
