IPsec tunneling between windows2000 and cisco 2620

[kawin]

Hi,

Has any had experience setting up IPsec tunneling between a windows 2000 machine and a cisco 2620 router?

I have a cisco 2620 I can play with, so I'm experimenting with this feature.

Thanks!

Kawin

[imeissner]

Hi Kawin,

I have configured this between a PIX and win 2k box with a dynamic crypto map.

crypto dynamic-map DYN_MAP_NAME 1 set transform-set

crypto map MAP_NAME ipsec-isakmp dynamic

DYN_MAP_NAME

crypto map MAP_NAME interface

Ingolf

[imeissner]

Hi Kawin,

here ar the link for the IOS

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fsecur_c/fipsenc/scfipsec.htm#1004551

[kawin]

Greetings! Thanks for the reply.

Is there any chance you can send me a sample config or the 2620 router and the win2K setup? I'm new to this technology and would like to see a sample setup so I may learn from it!

Again thanks for all your help!

Kawin

[imeissner]

Hi Kawin,

I can send you a cutout from my PIX configuration w/o IP's

crypto ipsec transform-set IPSEC_SET_3DES ah-md5-hmac esp-3des

crypto dynamic-map DYN_MAP 1 set transform-set IPSEC_SET_3DES

crypto map IPSEC_MAP 100 ipsec-isakmp dynamic DYN_MAP

crypto map IPSEC_MAP interface outside

I can't you give the config for the win2k box, this one is configured be the customer of the other side.

Ingolf

[cjacinto]

Here's a good link.

http://www.cisco.com/warp/customer/707/2000.html