Hello. I am still pretty new to Cisco IOS, but I think I'm getting there. Right now I am trying to configure a sort of mesh VPN setup between five routers in such a way that every router can conect to every other roughter through VPN over an emulated Internet connection I set up (NAT). Here is the configuration of one router. I am using Packet Tracer with 2811 routers.
Current configuration : 3021 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Central
!
!
!
!
!
!
!
!
crypto isakmp policy 1
encr aes 128
authentication pre-share
group 2
!
crypto isakmp key VPNtun address 222.222.222.6
crypto isakmp key VPNtun address 222.222.222.10
crypto isakmp key VPNtun address 222.222.222.14
crypto isakmp key VPNtun address 222.222.222.18
!
!
crypto ipsec transform-set TRANS-SET-GRE-TUNNEL esp-aes 128 esp-sha-hmac
!
crypto map Central_Out 5 ipsec-isakmp
set peer 222.222.222.14
set transform-set TRANS-SET-GRE-TUNNEL
match address IPSEC-TRAFFIC
!
crypto map Central_Out 6 ipsec-isakmp
set peer 222.222.222.10
set transform-set TRANS-SET-GRE-TUNNEL
match address IPSEC-TRAFFIC
!
crypto map Central_Out 7 ipsec-isakmp
set peer 222.222.222.6
set transform-set TRANS-SET-GRE-TUNNEL
match address IPSEC-TRAFFIC
!
crypto map Central_Out 8 ipsec-isakmp
set peer 222.222.222.18
set transform-set TRANS-SET-GRE-TUNNEL
match address IPSEC-TRAFFIC
!
!
!
!
!
spanning-tree mode pvst
!
!
!
!
interface Tunnel5
ip address 10.10.20.1 255.255.255.0
tunnel source FastEthernet1/0
tunnel destination 222.222.222.18
!
!
interface Tunnel6
ip address 10.10.40.1 255.255.255.0
tunnel source FastEthernet1/0
tunnel destination 222.222.222.14
!
!
interface Tunnel7
ip address 10.10.60.1 255.255.255.0
tunnel source FastEthernet1/0
tunnel destination 222.222.222.6
!
!
interface Tunnel8
ip address 10.10.80.1 255.255.255.0
tunnel source FastEthernet1/0
tunnel destination 222.222.222.10
!
!
interface FastEthernet0/0
ip address 10.1.50.1 255.255.255.0
ip nat inside
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
!
interface FastEthernet0/1.2
encapsulation dot1Q 2
ip address 10.1.2.1 255.255.255.0
ip nat inside
!
interface FastEthernet0/1.5
encapsulation dot1Q 5
ip address 10.1.5.1 255.255.255.0
ip nat inside
!
interface FastEthernet0/1.10
encapsulation dot1Q 10
ip address 10.1.10.1 255.255.255.0
ip nat inside
!
interface FastEthernet1/0
ip address 222.222.222.2 255.255.255.252
ip nat outside
duplex auto
speed auto
!
interface Vlan1
no ip address
shutdown
!
router eigrp 7
network 10.0.0.0
auto-summary
!
ip nat inside source list 199 interface FastEthernet1/0 overload
ip nat inside source static tcp 10.1.50.2 80 222.222.222.2 80
ip classless
ip route 0.0.0.0 0.0.0.0 222.222.222.1
!
!
ip access-list extended IPSEC-TRAFFIC
permit gre host 222.222.222.2 host 222.222.222.6
permit gre host 222.222.222.2 host 222.222.222.10
permit gre host 222.222.222.2 host 222.222.222.14
permit gre host 222.222.222.2 host 222.222.222.18
access-list 110 deny tcp any any eq telnet
access-list 111 deny tcp any any eq ftp
access-list 113 deny tcp any 10.1.50.0 0.0.0.255 eq 22
access-list 114 deny tcp any any eq 81
access-list 115 deny udp any any eq 82
access-list 199 permit ip 10.1.0.0 0.0.255.255 any
!
!
!
!
!
line con 0
line vty 0 4
login
!
!
!
end
Every time I try to add the crypto map to interface f1/0, packet tracer crashes on me. So, can anyone help me figure out what I'm doing wrong?
