-------------------
Router 1
--------------------
crypto isakmp policy 10
encr aes
authentication pre-share
group 2
lifetime 42000
crypto isakmp key cisco address 10.1.1.2
!
!
crypto ipsec transform-set R1TOR2 esp-aes esp-sha-hmac
!
crypto map toR2 10 ipsec-isakmp
set peer 10.1.1.2
set transform-set R1TOR2
match address 101
!
!
!
!
interface FastEthernet0/0
ip address 202.1.1.1 255.255.255.0 secondary
ip address 10.1.1.1 255.255.255.0
duplex auto
speed auto
crypto map toR2
!
interface FastEthernet0/1
ip address 10.1.2.1 255.255.255.0
duplex auto
speed auto
!
ip route 10.1.3.0 255.255.255.0 10.1.1.2
!
no ip http server
no ip http secure-server
!
!
access-list 101 permit ip host 10.1.1.1 host 10.1.1.2
access-list 101 permit ip 10.1.2.0 0.0.0.255 10.1.3.0 0.0.0.255
access-list 101 permit ip 10.1.3.0 0.0.0.255 10.1.2.0 0.0.0.255
----------------------
Router 2
---------------------
crypto isakmp policy 20
encr aes
authentication pre-share
group 2
lifetime 42000
crypto isakmp key cisco address 10.1.1.1
!
!
crypto ipsec transform-set R2toR1 esp-aes esp-sha-hmac
!
crypto map vpn 10 ipsec-isakmp
set peer 10.1.1.1
set transform-set R2toR1
match address 101
!
!
!
!
interface FastEthernet0/0
ip address 202.1.1.2 255.255.255.0 secondary
ip address 10.1.1.2 255.255.255.0
duplex auto
speed auto
crypto map vpn
!
interface FastEthernet0/1
ip address 10.1.3.1 255.255.255.0
duplex auto
speed auto
!
ip route 10.1.2.0 255.255.255.0 10.1.1.1
!
no ip http server
no ip http secure-server
!
!
access-list 101 permit ip host 10.1.1.2 host 10.1.1.1
access-list 101 permit ip 10.1.3.0 0.0.0.255 10.1.2.0 0.0.0.255
!
!
!
Hello guys,
I am facing a problem this is site to site vpn configured on gns on two routers. Now when I ping other side of directly conected interface vpn tunnel comes up but what I want is when inside network wants to talk to inside network on other side , tunnel must come up but it is not happening.
Please guide.
Appreciate your efforts.
