Cisco IPSec

Site to Site

Luodaan ISAKMP Policy phace 1:lle.

Create an ISAKMP policy for Phase 1

crypto isakmp policy 10
 hash sha
 authentication pre-share

crypto isakmp key cisco@123 address 10.5.27.

crypto ipsec transform-set MY-SET esp-aes  128 esp-sha-hmac
crypto ipsec security-association lifetime seconds 3600

Salli IPSec sisällepäin

ip access-list extended VPN-TRAFFIC
permit ip  192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255