Configuracin VPNs Site-to-Site IPsec con CLI IOS Topology Diagram

1.- configurar interfaces 2.- configurar protocolo de enrutamiento EIGRP 100 3.-configurar polticas ike R1(config ! cr"pto isakmp ena#le R1(config ! cr"pto isakmp polic" 10 R1(config-isakmp ! aut$entication pre-s$are R1(config-isakmp ! encr"ption aes 2%& R1(config-isakmp ! $as$ s$a R1(config-isakmp ! group % R1(config-isakmp ! lifetime 3&00 R3(config ! cr"pto isakmp ena#le R3(config ! cr"pto isakmp polic" 10 R3(config-isakmp ! aut$entication pre-s$are R3(config-isakmp ! encr"ption aes 2%& R3(config-isakmp ! $as$ s$a R3(config-isakmp ! group % R3(config-isakmp ! lifetime 3&00 R1(config ! cr"pto isakmp ke" cisco address 1'2.1&(.23.3 R3(config ! cr"pto isakmp ke" cisco address 1'2.1&(.12.1 R1# show crypto isakmp policy ).- configurar polticas ipsec R1(config ! cr"pto ipsec transform-set %0 esp-aes 2%& esp-s$a-$mac R1(cfg-cr"pto-trans ! e*it

R3(config ! cr"pto ipsec transform-set %0 esp-aes 2%& esp-s$a-$mac R3(cfg-cr"pto-trans ! e*it R1(config ! cr"pto ipsec securit"-association lifetime seconds 1(00 R3(config ! cr"pto ipsec securit"-association lifetime seconds 1(00 %.-definir tr+fico interesante R1(config ! access-list 101 permit ip 1,2.1&.1.0 0.0.0.2%% 1,2.1&.3.0 0.0.0.2%% R3(config ! access-list 101 permit ip 1,2.1&.3.0 0.0.0.2%% 1,2.1&.1.0 0.0.0.2%% &.- crear cr"pto map R1(config ! cr"pto map -.-/P 10 ipsec-isakmp R1(config-cr"pto-map ! matc$ address 101 R1(config-cr"pto-map ! set peer 1'2.1&(.23.3 R1(config-cr"pto-map ! set pfs group% R1(config-cr"pto-map ! set transform-set %0 R1(config-cr"pto-map ! set securit"-association lifetime seconds '00 R3(config ! cr"pto map -.-/P 10 ipsec-isakmp R3(config-cr"pto-map ! matc$ address 101 R3(config-cr"pto-map ! set peer 1'2.1&(.12.1 R3(config-cr"pto-map ! set pfs group% R3(config-cr"pto-map ! set transform-set %0 R3(config-cr"pto-map ! set securit"-association lifetime seconds '00 R1(config ! interface fastet$ernet000 R1(config-if ! cr"pto map -.-/P R3(config ! interface serial00001 R3(config-if ! cr"pto map -.-/P R1# show crypto ipsec transform-set R1# show crypto map R1# show crypto isakmp sa R1# show crypto ipsec sa Prue#e un Ping e*tendido desde el R1 con interfa1 origen la loop#ack02 $acia el la loop#ack 0 del R3.