Re: [cisco] Cisco 2811

>
> Ar mai trebui sa fie si un tunel ipsec, ceva de genul:
> -------------------------------- code -----------------------------
> crypto isakmp policy 100
>   encr 3des
>   hash md5
>   group 2
> !
> crypto isakmp client configuration group NUME1
>   key<parola>
> !
> !
> crypto ipsec transform-set VPN_1 esp-3des esp-md5-hmac
> !
> crypto map myvpn 10 ipsec-isakmp
>   ! Incomplete
>   set peer<ip>
>   set transform-set VPN_1
>   match address 101
> !
> ip nat inside source static 192.168.0.0 255.255.255.0<ip_ext>  route-map
> nonat
> route-map nonat permit 10
>   match ip address 122
> ----------------- end code ---------------------------------
>
> ce imi scapa?
>
match address 101
acl 101 parca nu l-am vazut in config

din cate vad in acl-ul de nat ar trebui sa fie
acl 101, permit ip 192.168.0 0.0.0.255 172.16.1.0 0.0.0.255
(si in partea cealalta, trebuie sa fie "in oglinda")

eu folosesc in loc de:

 > crypto isakmp client configuration group NUME1
 >   key<parola>
crypto isakmp key xxxx address peer_ip no-xauth

-- 
Bogdan
_______________________________________________
cisco mailing list
[email protected]
http://lists.lug.ro/mailman/listinfo/cisco