09-11-2011 12:57 PM - edited 02-21-2020 05:34 PM
I want to set up remote access on a Cisco 800 router
This is what I've geconfigureert
aaa new-model
!
aaa authentication login rtr-remote local
aaa authorization network rtr-remote local
aaa session-id common
!
username Cisco password 0 Cisco
!
crypto isakmp policy 1
encryption 3des
authentication pre-share
Group 2
lifetime 480
!
crypto isakmp client configuration group rtr-remote
key secret-password
195,130,130,131 195.130.131.4 dns
domain company.com
Pool dynpool
!
crypto ipsec transform-set esp-3des esp vpn1-sha-hmac
crypto ipsec security-association lifetime seconds 86400
!
crypto dynamic-map dynmap 1
set transform-set vpn1
Reverse Route
!
crypto map static-map 1 ipsec-isakmp dynamic dynmap
crypto map isakmp authorization list rtr-dynmap remote
crypto map client configuration address respond dynmap
crypto ipsec client ezvpn ezvpnclient
connect auto
group 2 key secret-password
client mode
peer 84,197,171,176
!
interface GigabitEthernet0
crypto ipsec client ezvpn ezvpnclient outside
crypto map static-map
!
interface vlan 1
crypto ipsec client ezvpn ezvpnclient inside
09-11-2011 03:59 PM
Sorry, but what is the question? Also, it seems like you have configured both ezvpn client and ezvpn server in one IOS router. What are you trying to achieve? are you trying to configure the router as the vpn client or server?
Also, your ip address has been incorrectly configured, it should be with "." (dot) instead of "," (comma)
09-11-2011 11:31 PM
The remote access VPN client creates an IPSec tunnel to the router or am I doing finds?
09-12-2011 12:08 AM
OK, so that would be ezvpn server.
At the moment, you have configured both ezvpn server and client which is incorrect. You can remove all the ezvpn client configuration.
Here is a sample config for ezvpn server:
http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800949ba.shtml
Hope that helps.
09-12-2011 12:17 AM
I want no through AnyConnect VPN or AnyConnect Secure Mobility connect to the router via a VPN IPSec tunnel
09-12-2011 12:22 AM
Sorry, don't quite understand what you mean.
09-12-2011 12:39 AM
okay I'll put it this blessing I use AnyConnect VPN AnyConnect and I want to secure mobility in remotely via a VPN IPSec tunnel lied to the 800 router how can you do?
09-12-2011 12:50 AM
ok, so you mean you would like to use AnyConnect VPN in full tunnel mode like the IPSec VPN.
You would need to purchase license for AnyConnect VPN, and here is a sample config for SSL VPN on IOS:
http://www.cisco.com/en/US/products/ps6496/products_configuration_example09186a0080720346.shtml
The sample configuration is using the old SVC client, you can just download the AnyConnect client to use AnyConnect VPN.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide