вторник, 23 декабря 2008 г.

VPN GRE tunnel with IPSEC

quick checklist

1) crypto isakmp policy 10
 encr aes 256
 authentication pre-share
 group 2

2) crypto isakmp key cisco address 192.168.3.2 no-xauth

3) crypto ipsec transform-set DEMO esp-aes 256 esp-sha-hmac
4) crypto ipsec profile VPN_PROFILE
set transform-set DEMO 
5)  tunnel int
    ip address 192.168.3.1 255.255.255.0
 tunnel source FastEthernet0/0
 tunnel destination 10.0.0.2
 tunnel mode ipsec ipv4
 tunnel protection ipsec profile VPN_PROFILE

Комментариев нет: