How to setup vpn server on 1604 router 1

[UNIX72]

Currently i have a vpn server on a windows2000 machine. I want to move it to the cisco 1604 router. Does anybody know how to configure the router for vpn, thanks

 

[n2messiah]

I set it up using a 2621 running 12.3 IOS with the Firewall with Ipsec 3des and I used the freeware taccacs+ server for unix. Cisco has a client package that you have to install. Be carefull to run the sp5 on NT immediatly after installation of the Cisco VPN client (before rebooting!). You do not need the taccacs+ server if you are going to use the same shared key for all of the vpn clients but that is really not practical. The scary part is the client package has the tendancy to crack nt kernels (had no problem with 95 & 98 machines).

 

[UNIX72]

Thanks n2messiah for the NT info because we have alot remote nt users.

 

[UNIX72]

Does anybody know where i could get some information on 1604 vpn setup, thanks

 

[n2messiah]

I am assuming that you are running with the firewall and have 3des and ipsec on your router. The client is available on their websight and costs about $250 dollars for 100 seats.


========================
!define isakmp policy
crypto isakmp policy 1
encryption 3des
authentication pre-share
!define preshrared key for vpn client
crypto isakmp key PRESHARED_KEY_PASSWORD address 0.0.0.0 0.0.0.0
!
!
crypto isakmp client configuration address-pool local vpnpool
!
!
crypto ipsec transform-set trans1 esp-3des esp-sha-hmac
!
! The dynamic map is for vpn clients
crypto dynamic-map dynmap 10
set transform-set trans1
!
!
crypto map intmap client configuration address initiate
crypto map intmap client configuration address respond
crypto map intmap 10 ipsec-isakmp dynamic dynmap
!
!
!
!
interface FastEthernet0/0
description connected to EthernetLAN
ip address INTERNAL_IP_RANGE YOUR_SUBNET_INFO
no ip directed-broadcast
duplex auto
speed auto
!
interface FastEthernet0/1
description connected to Internet
ip address INTERNET_IP_RANGE INTERNET_RANGE_SUBNET
ip access-group 101 in
ip inspect FastEthernet_0_0 out
no ip directed-broadcast
duplex auto
speed auto
!
ip classless
! define an ip pool for your vpn client
ip local pool mypool SELECT_NON_ROUTABLE_IP_RANGE_FOR_VPN_LOWER SELECT_NON_ROUTABLE_IP_RANGE_FOR_VPN_UPPER
!
!
access-list 101 remark *** for IPSEC traffic ***
access-list 101 permit esp any any
access-list 101 permit ahp any any
access-list 101 permit udp any any eq isakmp
access-list 101 remark *** traffic from vpn clients***
access-list 101 permit NON_ROUTABLE_IP_RANGE_FOR_VPN NON_ROUTABLE_IP_RANGE_SUBNET INTERNAL_IP_RANGE YOUR_SUBNET_INFO
access-list 101 remark *** traffic from vpn clients***

 

[bigdawg]

I don't have a solution, but just inquiring about how you setup your VPN service on a MS Windows 2000 Server?

Thanks.

 

[UNIX72]

Thanks n2messiah