configure the all interfaces with the following specified ip
addresses ip addresses .then run the Router rip for instance or you can use any
other routing protocol.
Benefit . Our data will be traveling in encrypted form .
R1
crypto isakam policy 10
authentication pre-share
hash sha
encryption aes 256
group 2
lifetime 86400
crypto isakkam key toor address 1.1.1.2
crypto ipsec transform-set TSET esp-aes esp-sha-hmac
access-list 101 permit ip 10.10.10.0 0.255.255.255
20.20.20.0 0.255.255.255
crypto map CMAP 10 ipsec-isakamp
set peer 1.1.1.1
match address 101
set transform-set TSET
int fa 0/0
crypto map CMAP
R2
crypto isamp policy 10
authentication pre-share
hash sha
encryption aes 256
group 2
lifetime 86400
crypto isamp ey toor address 1.1.1.1
crypto ipsec transform-set TSET esp-aes esp-sha-hmac
access-list 101 permit ip 20.20.20.0 0.255.255.255
10.10.10.0 0.255.255.255
crypto map CMAP 10 ipsec-isakmp
set peer 1.1.1.1
match address 101
set transform-set TSET
int fa 0/0
Crypto map CMAP
No comments:
Post a Comment