remote vpn ipsec tunnel on a cisco 800 series

[pcfreak49]

how can you configure remote vpn ipsec tunnel on a Cisco 800 router ?

[Federico Coto Fajardo]

Hi,

If I understand correctly, you want to use the 800 router as a Hardware client?

If so, you can check this link:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080241a0d.shtml

The 800 router can accept remote IPsec connections (IPsec server), or act as an IPsec client to initiate a tunnel to an IPsec server. (This is what EzVPN is all about).

Federico.

[pcfreak49]

I want via laptop, ipad, desktop remote ipsec vpn to a remote router through Cisco AnyConnect and Cisco AnyConnect mobility

[Federico Coto Fajardo]

Then, check out this one:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800946b7.shtml

The above is for IPsec connections.

For AnyConnect:

http://www.cisco.com/en/US/products/ps5855/products_configuration_example09186a0080af314a.shtml

Federico.

[pcfreak49]

You can also configure without a web interface and allows you to configure a tunnel interface?

[Federico Coto Fajardo]

For IPsec you can go with the old way of configuring or using VTIs:

http://www.cisco.com/en/US/docs/ios-xml/ios/sec_conn_vpnips/configuration/15-1s/sec-ipsec-virt-tunnl.html#GUID-E9EB4518-6269-42E8-908C-57BA5D6334A5

Federico.

[pcfreak49]

I have it configured but can not connect?

[Federico Coto Fajardo]

You might want to check what I mentioned above.

If phase 1 is getting established:

sh cry isa sa

If there's nothing, verify that you have connectivity from the client to the IP of the Router you're trying to VPN to.

If phase 1 is established, verify phase 2:

sh cry ipsec sa

After that, the tunnel should established and traffic should pass. If not, we should see where the problem is.

Federico.

[pcfreak49]

this is the output of crypto isakmp sa and crypto ipsec sa

IPv4 Crypto ISAKMP SA
dst src state conn-id status

IPv6 Crypto ISAKMP SA

R1 # sh crypto ipsec sa

R1 #

[Federico Coto Fajardo]

You're not getting any output.

Can you PING the router from the VPN client? (connectivity)?

If connectivity is fine, make sure that the output of those debugs are being sent to your output screen (telnet, console, etc.)

Federico.

[pcfreak49]

no it does not work

[Federico Coto Fajardo]

Ok.

If you don't have connectivity from the client to the router we need to go back....

This is no VPN problem, since you're not even getting there...

Why is that you have no connectivity between the client and server has to be the first thing to resolve here.

Is it your client? Your ISP? Something in between?

Federico.

[pcfreak49]

I'll just wait for the running-config just by sending