Configuracin VPNs Site-to-Site IPsec con CLI IOS

Topology Diagram
1.- configurar interfaces
2.- configurar protocolo de enrutamiento EIGRP 100
3.-configurar polticas ike
R1(config! cr"pto isakmp ena#le
R1(config! cr"pto isakmp polic" 10
R1(config-isakmp! aut$entication pre-s$are
R1(config-isakmp! encr"ption aes 2%&
R1(config-isakmp! $as$ s$a
R1(config-isakmp! group %
R1(config-isakmp! lifetime 3&00
R3(config! cr"pto isakmp ena#le
R3(config! cr"pto isakmp polic" 10
R3(config-isakmp! aut$entication pre-s$are
R3(config-isakmp! encr"ption aes 2%&
R3(config-isakmp! $as$ s$a
R3(config-isakmp! group %
R3(config-isakmp! lifetime 3&00
R1(config! cr"pto isakmp ke" cisco address 1'2.1&(.23.3
R3(config! cr"pto isakmp ke" cisco address 1'2.1&(.12.1
R1# show crypto isakmp policy
).- configurar polticas ipsec
R1(config! cr"pto ipsec transform-set %0 esp-aes 2%& esp-s$a-$mac
R1(cfg-cr"pto-trans! e*it
R3(config! cr"pto ipsec transform-set %0 esp-aes 2%& esp-s$a-$mac
R3(cfg-cr"pto-trans! e*it
R1(config! cr"pto ipsec securit"-association lifetime seconds 1(00
R3(config! cr"pto ipsec securit"-association lifetime seconds 1(00
%.-definir tr+fico interesante
R1(config! access-list 101 permit ip 1,2.1&.1.0 0.0.0.2%% 1,2.1&.3.0 0.0.0.2%%
R3(config! access-list 101 permit ip 1,2.1&.3.0 0.0.0.2%% 1,2.1&.1.0 0.0.0.2%%
&.- crear cr"pto map
R1(config! cr"pto map -.-/P 10 ipsec-isakmp
R1(config-cr"pto-map! matc$ address 101
R1(config-cr"pto-map! set peer 1'2.1&(.23.3
R1(config-cr"pto-map! set pfs group%
R1(config-cr"pto-map! set transform-set %0
R1(config-cr"pto-map! set securit"-association lifetime seconds '00
R3(config! cr"pto map -.-/P 10 ipsec-isakmp
R3(config-cr"pto-map! matc$ address 101
R3(config-cr"pto-map! set peer 1'2.1&(.12.1
R3(config-cr"pto-map! set pfs group%
R3(config-cr"pto-map! set transform-set %0
R3(config-cr"pto-map! set securit"-association lifetime seconds '00
R1(config! interface fastet$ernet000
R1(config-if! cr"pto map -.-/P
R3(config! interface serial00001
R3(config-if! cr"pto map -.-/P
R1# show crypto ipsec transform-set
R1# show crypto map
R1# show crypto isakmp sa
R1# show crypto ipsec sa
Prue#e un Ping e*tendido desde el R1 con interfa1 origen la loop#ack02 $acia el la loop#ack 0 del R3.