Hola el problema que tengo es que al querer hacer una VPN con el programa SDM de cisco configuro todos los pasos y cuando le hago un test me salta el siguiente error: "The peer must be routed trhough the crypto map interface. The folowing peer(s) do no have a routing entry in the routing table." a que se debe este error?? gracias
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations derfloh on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
VPN client to client cisco 850
- Thread starter cem11
- Start date
Primero, este foro es por lo general sólo en inglés ... no muchas personas serán capaces de ayudar a menos que usted escriba a máquina en inglés.
¿Segundo, trazó un mapa usted del mapa de crypto al interfaz saliente? Fije un "sh run"
You guys didn't know I knew Spanish, did you?lol
Burt
¿Segundo, trazó un mapa usted del mapa de crypto al interfaz saliente? Fije un "sh run"
You guys didn't know I knew Spanish, did you?lol
Burt
- Thread starter
- #3
Burst, thanks to respond to me
if you want, you can reply to me in engligh, thanks again.
Current configuration : 3339 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname scp
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
enable secret 5 $1$.43A$hSVXhgfP7FUb1j7o4e7Y20
enable password xxxxxx
!
no aaa new-model
!
crypto pki trustpoint TP-self-signed-3234541949
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3234541949
revocation-check none
rsakeypair TP-self-signed-3234541949
!
!
crypto pki certificate chain TP-self-signed-3234541949
certificate self-signed 01
3082023B 308201A4 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33323334 35343139 3439301E 170D3032 30333031 30363338
32365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 32333435
34313934 3930819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100DE96 09500E4D B9056F63 52760B9C 10B56AB6 FFFC4A4D 068D566D 565E499E
628199A5 57B0D475 785FD3BC 52F6215B 97258FD5 042876C6 17D215A3 4A623781
1AB08F52 7F1F3C51 8F0A55D1 22C88F80 66298EE0 2B9968BC 06861C22 35699728
AB2F2622 2B1C82C8 9752F135 AE345C1B C6A9E813 7CC8D088 CE4EFD02 6488C99D
BAD50203 010001A3 63306130 0F060355 1D130101 FF040530 030101FF 300E0603
551D1104 07300582 03736370 301F0603 551D2304 18301680 14AE4E59 285A4ED6
C16540E0 EA3E351B A78D85D4 CD301D06 03551D0E 04160414 AE4E5928 5A4ED6C1
6540E0EA 3E351BA7 8D85D4CD 300D0609 2A864886 F70D0101 04050003 818100A8
56993CBC C43D54DB 1E6074BA 9C3152FA DA62BB3E 76A546A5 B7683D09 D9AEEB7C
A60051C1 0CE55A65 9D6C1868 E8C30603 C5292FD7 3AB2B46F F46E453C 44FD2BF1
7BB505DE 770C9F74 91568570 AD2F5395 5B924E29 AF04AF0A 9B4A7336 71197C7F
548F6636 EE60F6D7 A95E693B 6DF7E95E AB6C5C0F DBADCC6A BA8B8F11 0E43E3
quit
no ip routing
!
!
no ip cef
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
ip name-server 209.99.224.24
!
!
!
username admin privilege 15 password 0 xxxxx
!
!
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp key conexion address 209.99.228.14
!
!
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
!
crypto map SDM_CMAP_1 1 ipsec-isakmp
description Tunnel to209.99.228.14
set peer 209.99.228.14
set transform-set ESP-3DES-SHA
match address 100
!
archive
log config
hidekeys
!
!
!
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
shutdown
!
interface FastEthernet3
shutdown
!
interface FastEthernet4
ip address 209.99.234.60 255.255.255.0
no ip route-cache
duplex auto
speed auto
crypto map SDM_CMAP_1
!
interface Vlan1
ip address 172.16.0.61 255.255.0.0
no ip route-cache
!
ip default-gateway 209.99.234.1
ip forward-protocol nd
ip route 209.99.228.0 255.255.255.0 FastEthernet4
!
ip http server
ip http authentication local
ip http secure-server
!
access-list 100 remark SDM_ACL Category=4
access-list 100 remark IPSec Rule
ip http server
ip http authentication local
ip http secure-server
!
access-list 100 remark SDM_ACL Category=4
access-list 100 remark IPSec Rule
access-list 100 permit ip 172.16.0.0 0.0.255.255 192.168.5.0 0.0.0.255
!
control-plane
!
!
line con 0
no modem enable
line aux 0
line vty 0 4
privilege level 15
password telnet
login local
transport input telnet ssh
!
scheduler max-task-time 5000
end
if you want, you can reply to me in engligh, thanks again.
Current configuration : 3339 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname scp
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
enable secret 5 $1$.43A$hSVXhgfP7FUb1j7o4e7Y20
enable password xxxxxx
!
no aaa new-model
!
crypto pki trustpoint TP-self-signed-3234541949
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3234541949
revocation-check none
rsakeypair TP-self-signed-3234541949
!
!
crypto pki certificate chain TP-self-signed-3234541949
certificate self-signed 01
3082023B 308201A4 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33323334 35343139 3439301E 170D3032 30333031 30363338
32365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 32333435
34313934 3930819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100DE96 09500E4D B9056F63 52760B9C 10B56AB6 FFFC4A4D 068D566D 565E499E
628199A5 57B0D475 785FD3BC 52F6215B 97258FD5 042876C6 17D215A3 4A623781
1AB08F52 7F1F3C51 8F0A55D1 22C88F80 66298EE0 2B9968BC 06861C22 35699728
AB2F2622 2B1C82C8 9752F135 AE345C1B C6A9E813 7CC8D088 CE4EFD02 6488C99D
BAD50203 010001A3 63306130 0F060355 1D130101 FF040530 030101FF 300E0603
551D1104 07300582 03736370 301F0603 551D2304 18301680 14AE4E59 285A4ED6
C16540E0 EA3E351B A78D85D4 CD301D06 03551D0E 04160414 AE4E5928 5A4ED6C1
6540E0EA 3E351BA7 8D85D4CD 300D0609 2A864886 F70D0101 04050003 818100A8
56993CBC C43D54DB 1E6074BA 9C3152FA DA62BB3E 76A546A5 B7683D09 D9AEEB7C
A60051C1 0CE55A65 9D6C1868 E8C30603 C5292FD7 3AB2B46F F46E453C 44FD2BF1
7BB505DE 770C9F74 91568570 AD2F5395 5B924E29 AF04AF0A 9B4A7336 71197C7F
548F6636 EE60F6D7 A95E693B 6DF7E95E AB6C5C0F DBADCC6A BA8B8F11 0E43E3
quit
no ip routing
!
!
no ip cef
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
ip name-server 209.99.224.24
!
!
!
username admin privilege 15 password 0 xxxxx
!
!
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp key conexion address 209.99.228.14
!
!
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
!
crypto map SDM_CMAP_1 1 ipsec-isakmp
description Tunnel to209.99.228.14
set peer 209.99.228.14
set transform-set ESP-3DES-SHA
match address 100
!
archive
log config
hidekeys
!
!
!
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
shutdown
!
interface FastEthernet3
shutdown
!
interface FastEthernet4
ip address 209.99.234.60 255.255.255.0
no ip route-cache
duplex auto
speed auto
crypto map SDM_CMAP_1
!
interface Vlan1
ip address 172.16.0.61 255.255.0.0
no ip route-cache
!
ip default-gateway 209.99.234.1
ip forward-protocol nd
ip route 209.99.228.0 255.255.255.0 FastEthernet4
!
ip http server
ip http authentication local
ip http secure-server
!
access-list 100 remark SDM_ACL Category=4
access-list 100 remark IPSec Rule
ip http server
ip http authentication local
ip http secure-server
!
access-list 100 remark SDM_ACL Category=4
access-list 100 remark IPSec Rule
access-list 100 permit ip 172.16.0.0 0.0.255.255 192.168.5.0 0.0.0.255
!
control-plane
!
!
line con 0
no modem enable
line aux 0
line vty 0 4
privilege level 15
password telnet
login local
transport input telnet ssh
!
scheduler max-task-time 5000
end
- Status