cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3565
Views
0
Helpful
7
Replies

remote access VPN

pcfreak49
Level 7
Level 7

I want to set up remote access on a Cisco 800 router
This is what I've geconfigureert

aaa new-model
!
aaa authentication login rtr-remote local
aaa authorization network rtr-remote local
aaa session-id common
!
username Cisco password 0 Cisco
!
crypto isakmp policy 1
encryption 3des
authentication pre-share
Group 2
lifetime 480
!
crypto isakmp client configuration group rtr-remote
key secret-password
195,130,130,131 195.130.131.4 dns
domain company.com
Pool dynpool
!
crypto ipsec transform-set esp-3des esp vpn1-sha-hmac

crypto ipsec security-association lifetime seconds 86400
!
crypto dynamic-map dynmap 1
set transform-set vpn1
Reverse Route
!
crypto map static-map 1 ipsec-isakmp dynamic dynmap
crypto map isakmp authorization list rtr-dynmap remote
crypto map client configuration address respond dynmap
crypto ipsec client ezvpn ezvpnclient
connect auto
group 2 key secret-password
client mode
peer 84,197,171,176
!
interface GigabitEthernet0
crypto ipsec client ezvpn ezvpnclient outside
crypto map static-map
!
interface vlan 1
crypto ipsec client ezvpn ezvpnclient inside

7 Replies 7

Jennifer Halim
Cisco Employee
Cisco Employee

Sorry, but what is the question? Also, it seems like you have configured both ezvpn client and ezvpn server in one IOS router. What are you trying to achieve? are you trying to configure the router as the vpn client or server?

Also, your ip address has been incorrectly configured, it should be with "." (dot) instead of "," (comma)

The remote access VPN client creates an IPSec tunnel to the router or am I doing finds?

OK, so that would be ezvpn server.

At the moment, you have configured both ezvpn server and client which is incorrect. You can remove all the ezvpn client configuration.

Here is a sample config for ezvpn server:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800949ba.shtml

Hope that helps.

I want no through AnyConnect VPN or AnyConnect Secure Mobility connect to the router via a VPN IPSec tunnel

Sorry, don't quite understand what you mean.

okay I'll put it this blessing I use AnyConnect VPN AnyConnect and I want to secure mobility in remotely via a VPN IPSec tunnel lied to the 800 router how can you do?

ok, so you mean you would like to use AnyConnect VPN in full tunnel mode like the IPSec VPN.

You would need to purchase license for AnyConnect VPN, and here is a sample config for SSL VPN on IOS:

http://www.cisco.com/en/US/products/ps6496/products_configuration_example09186a0080720346.shtml

The sample configuration is using the old SVC client, you can just download the AnyConnect client to use AnyConnect VPN.