DrayTek UK Users' Community Forum
Help, Advice and Solutions from DrayTek Users
cisco iOS router vpn
- vasman
- Topic Author
- Offline
- New Member
Less
More
- Posts: 1
- Thank you received: 0
07 Apr 2014 21:41 #79588
by vasman
cisco iOS router vpn was created by vasman
Hi Guy's
I'm new draytek, i have a vigour 2860 router that needs to connect to a cisco 1841 via ipsec to address a ip network for voice and some data
i have them connected at the moment via a cisco 3640 bu need to use a the draytek, i can't see any sample configs anywhere so if any one can help a newbie on here that would be great i've attached the cisco config interface
crypto isakmp policy 1
hash md5
authentication pre-share
crypto isakmp key rossano address 0.0.0.0 0.0.0.0
!
!
crypto ipsec transform-set rtpset esp-des esp-md5-hmac
!
crypto dynamic-map rtpmap 10
match address 115
!
!
crypto map rtptrans 10 ipsec-isakmp dynamic rtpmap
!
FastEthernet0/0
ip address 81.137.126.251 255.255.255.248
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 212.54.187.254 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/0/0
!
interface FastEthernet0/0/1
!
interface FastEthernet0/0/2
!
interface FastEthernet0/0/3
!
!
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0
ip route 0.0.0.0 0.0.0.0 81.137.126.254
!
!
no ip http server
no ip http secure-server
!
access-list 115 permit ip 212.54.187.0 0.0.0.255 192.160.10.0 0.0.0.255
access-list 115 deny ip 212.54.187.0 0.0.0.255 any
access-list 120 deny ip 212.54.187.0 0.0.0.255 192.168.10.0 0.0.0.255
access-list 120 permit ip 212.54.187.0 0.0.0.255 any
!
route-map nonat permit 10
match ip address 120
I'm new draytek, i have a vigour 2860 router that needs to connect to a cisco 1841 via ipsec to address a ip network for voice and some data
i have them connected at the moment via a cisco 3640 bu need to use a the draytek, i can't see any sample configs anywhere so if any one can help a newbie on here that would be great i've attached the cisco config interface
crypto isakmp policy 1
hash md5
authentication pre-share
crypto isakmp key rossano address 0.0.0.0 0.0.0.0
!
!
crypto ipsec transform-set rtpset esp-des esp-md5-hmac
!
crypto dynamic-map rtpmap 10
match address 115
!
!
crypto map rtptrans 10 ipsec-isakmp dynamic rtpmap
!
FastEthernet0/0
ip address 81.137.126.251 255.255.255.248
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 212.54.187.254 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/0/0
!
interface FastEthernet0/0/1
!
interface FastEthernet0/0/2
!
interface FastEthernet0/0/3
!
!
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0
ip route 0.0.0.0 0.0.0.0 81.137.126.254
!
!
no ip http server
no ip http secure-server
!
access-list 115 permit ip 212.54.187.0 0.0.0.255 192.160.10.0 0.0.0.255
access-list 115 deny ip 212.54.187.0 0.0.0.255 any
access-list 120 deny ip 212.54.187.0 0.0.0.255 192.168.10.0 0.0.0.255
access-list 120 permit ip 212.54.187.0 0.0.0.255 any
!
route-map nonat permit 10
match ip address 120
Please Log in or Create an account to join the conversation.
- sicon
- Offline
- Contributor
Less
More
- Posts: 642
- Thank you received: 0
08 Apr 2014 12:20 #79597
by sicon
Replied by sicon on topic Re: cisco iOS router vpn
You may need to amed some bit but this should help
https://www.draytek.com/index.php?option=com_k2&view=itemlist&task=category&id=345:cisco-to-vigor&Itemid=293&lang=en
Please Log in or Create an account to join the conversation.
Moderators: Chris, Sami
Copyright © 2024 DrayTek