hello sir,
i got some problems in configurig ipsec-isakmp with preshared-key.
right now i am configuring 2 1751 routers with back-to-back fastethernet so plz tell me the configuration of ipsec and other IKEs.
here i attached my configuration of both routers.
both routers is connected to back-to-back ethernet cable
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rtr1
!
boot-start-marker
boot system flash:c1700-k9o3sy7-mz.123-12a.bin
boot-end-marker
!
logging buffered 4096 debugging
enable secret xxxxx
!
memory-size iomem 15
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no aaa new-model
ip subnet-zero
!
!
!
ip cef
ip audit po max-events 100
no ftp-server write-enable
!
!
!
!
!
crypto isakmp policy 100
hash md5
authentication pre-share
lifetime 43200
crypto isakmp key cisco123 address 10.230.4.205
!
!
crypto ipsec transform-set MD5-DES esp-des esp-md5-hmac
crypto ipsec transform-set DES-ONLY esp-des
crypto ipsec transform-set AH-ONLY ah-sha-hmac
crypto ipsec transform-set CPU-HOG ah-md5-hmac esp-des esp-md5-hmac
!
crypto map testmap 50 ipsec-isakmp
description TUNEL TO Rtr2
set peer 10.230.4.205
set security-association lifetime seconds 43200
set transform-set CPU-HOG
match address 125
!
!
!
interface Loopback0
ip address 10.240.1.1 255.255.255.0
!
interface FastEthernet0/0
ip address 10.230.4.59 255.255.255.0
ip access-group 110 in
ip access-group 110 out
speed auto
full-duplex
crypto map testmap
!
interface Serial0/0
no ip address
shutdown
!
router eigrp 1
network 10.0.0.0
auto-summary
!
ip classless
no ip http server
no ip http secure-server
!
!
access-list 125 permit ip 10.240.1.0 0.0.0.255 10.240.2.0 0.0.0.255
!
!
line con 0
line aux 0
line vty 0 4
password xxx
Rtr1#
router2's config
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rtr2
!
boot-start-marker
boot-end-marker
!
logging buffered 4096 debugging
enable secret xxxx
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no aaa new-model
ip subnet-zero
!
!
!
no ip cef
ip audit po max-events 100
no ftp-server write-enable
!
!
!
!
!
crypto isakmp policy 100
hash md5
authentication pre-share
lifetime 43200
crypto isakmp key cisco123 address 10.230.4.59
!
!
crypto ipsec transform-set MD5-DES esp-des esp-md5-hmac
crypto ipsec transform-set DES-ONLY esp-des
crypto ipsec transform-set AH-ONLY ah-sha-hmac
crypto ipsec transform-set CPU-HOG ah-md5-hmac esp-des esp-md5-hmac
!
crypto map testmap 50 ipsec-isakmp
description TUNEL TO Rtr2
set peer 10.230.4.59
set security-association lifetime seconds 43200
set transform-set CPU-HOG
match address 125
!
!
!
interface Loopback0
ip address 10.240.2.1 255.255.255.0
!
interface FastEthernet0/0
ip address 10.230.4.205 255.255.255.0
ip access-group 110 in
ip access-group 110 out
speed auto
full-duplex
crypto map testmap
!
interface Serial0/0
no ip address
shutdown
!
router eigrp 1
network 10.0.0.0
auto-summary
!
ip classless
no ip http server
no ip http secure-server
!
!
access-list 125 permit ip 10.240.2.0 0.0.0.255 10.240.1.0 0.0.0.255
!
!
line con 0
line aux 0
line vty 0 4
password xxx
login
!
end
thx
