Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Westi on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

ipsec isakmp access-lists for traffic to encrypt and security?

Status
Not open for further replies.

mlj

MIS
Apr 9, 2001
1
GB
I am working on setting up a vpn connection point-to-point.
the encryption is working.
crypto isakmp policy 100
hash md5
authentication pre-share
crypto isakmp key gemplus address 10.3.162.2
!
crypto ipsec transform-set g_tran ah-sha-hmac esp-3des
!
crypto map g_map 10 ipsec-isakmp
set peer 10.3.162.2
set transform-set g_tran
match address 151
!
interface Serial0/0:0
ip address 10.3.162.1 255.255.255.252
ip access-group 120 in
no cdp enable
crypto map g_map
ip route 192.11.61.105 255.255.255.255 10.3.162.2
The access-lists I have defined are:
access-list 120 permit ahp any any
access-list 120 permit esp any any
access-list 120 permit udp any eq isakmp any eq isakmp
access-list 151 permit ip host 10.30.49.5 host 192.11.61.105
the config is the same in reverse at the other router end.
when I ping from 10.30.49.5 to 192.11.61.105 I get no reply.
I have defined the encryption access to the interface and the
crypto map to the access-list to define what is being encrypted.
I can only get it working when I define on the interface non
encrypted ip traffic between 10.30.49.5 and 192.11.61.105.

Note: Config modified for security resons so please ignore spelling mistakes.

thanks in advance.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top