Hi,
I have been trying to do IPsec for my school work. I spent many hours for it and it wont work. I will attach my packet tracer and code. I tried with license boot level securityk9 and then reloading and tried without it.
PKT: https://drive.google.com/file/d/1TR1dScM9KYky8FHMQd6zpmtEpsNcwQKU/view?usp=sharing
!R1 ---------------
config t
!license boot level securityk9
access-list 100 permit ip 10.47.1.0 0.0.0.255 10.47.3.0 0.0.0.255
hostname R1
interface g0/0/0
ip address 10.47.1.1 255.255.255.0
no shut
interface g0/0/1
ip address 192.168.47.2 255.255.255.0
no shut
exit
ip route 0.0.0.0 0.0.0.0 192.168.47.1
crypto isakmp policy 10
encryption aes 256
authentication pre-share
group 5
crypto isakmp key Secret-2020 address 192.168.48.2
crypto ipsec transform-set R1-R3 esp-aes 256 esp-sha-hmac
crypto map IPSEC-MAP 10 ipsec-isakmp
set peer 192.168.48.2
set pfs group5
set security-association lifetime seconds 86400
set transform-set R1-R3
match address 100
interface g0/0/1
crypto map IPSEC-MAP
end
show crypto ipsec sa
!R2--------------------
config t
hostname ISP
interface g0/0/1
ip address 192.168.48.1 255.255.255.0
no shut
interface g0/0/0
ip address 192.168.47.1 255.255.255.0
no shut
exit
end
!R3 ---------------
config t
!license boot level securityk9
hostname R2
interface g0/0/1
ip address 192.168.48.2 255.255.255.0
no shut
interface g0/0/0
ip address 10.47.3.1 255.255.255.0
no shut
exit
ip route 0.0.0.0 0.0.0.0 192.168.47.1
crypto isakmp policy 10
encryption aes 256
authentication pre-share
group 5
crypto isakmp key Secret-2020 address 192.168.47.2
crypto ipsec transform-set R1-R3 esp-aes 256 esp-sha-hmac
crypto map IPSEC-MAP 10 ipsec-isakmp
set peer 192.168.47.2
set pfs group5
set security-association lifetime seconds 86400
set transform-set R1-R3
match address 100
interface g0/0/1
crypto map IPSEC-MAP
access-list 100 permit ip 10.47.3.0 0.0.0.255 10.47.1.0 0.0.0.255
end
show crypto ipsec sa
