Перейти к содержимому

IPsec VPN Configurations Between Cisco ASA Firewall and Router | IPsec Between Firewall and Router

PM Networking

0:00 / 0:00

IPsec VPN Configurations Between Cisco ASA Firewall and Router | IPsec Between Firewall and Router

1 720 просмотров · 1 год назад
PM Networking
120 тыс. подписчиков
1 720 просмотров · 1 год назад
Join this channel to get access to the perks:    / @pmnetworking   Site-to-Site IPsec VPN Between ASA and Router ================================================================= 1️⃣ Define Interesting Traffic (Access-list) access-list VPN_ACL extended permit ip 192.168.1.0 255.255.255.0 192.168.2.0 255.255.255.0 2️⃣ IKEv1 Phase 1 Policy crypto ikev1 policy 10 encryption aes hash sha authentication pre-share group 2 lifetime 86400 3️⃣ Pre-shared Key tunnel-group 2.2.2.1 type ipsec-l2l tunnel-group 2.2.2.1 ipsec-attributes ikev1 pre-shared-key cisco123 4️⃣ IPSec Phase 2 (Transform Set & Crypto Map) crypto ipsec ikev1 transform-set VPN_TS esp-aes esp-sha-hmac crypto map VPN_MAP 10 match address VPN_ACL crypto map VPN_MAP 10 set peer 2.2.2.1 crypto map VPN_MAP 10 set ikev1 transform-set VPN_TS crypto map VPN_MAP interface outside 5️⃣ Enable IKEv1 on the Outside Interface crypto ikev1 enable outside 🔸 Cisco Router (R1) Configuration 1️⃣ Define Interesting Traffic (Access-list) access-list 100 permit ip 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255 2️⃣ IKEv1 Phase 1 Policy crypto isakmp policy 10 encr aes hash sha authentication pre-share group 2 lifetime 86400 3️⃣ Pre-shared Key crypto isakmp key cisco123 address 1.1.1.1 4️⃣ IPSec Phase 2 (Transform Set & Crypto Map) crypto ipsec transform-set VPN_TS esp-aes esp-sha-hmac 5️⃣ Crypto Map crypto map VPN_MAP 10 ipsec-isakmp set peer 1.1.1.1 set transform-set VPN_TS match address 100 6️⃣ Apply Crypto Map to Interface interface FastEthernet0/0 crypto map VPN_MAP 🔍 Verification Commands On ASA show crypto ikev1 sa show crypto ipsec sa On Router show crypto isakmp sa show crypto ipsec sa ========================================= Welcome to PM Networking! 🚀 Dive into the world of networking with us as we bring you comprehensive tutorials, practical lab exercises, and expert insights on Cisco Networking and Cloud Computing. Whether you're a beginner or an experienced professional, our channel is designed to help you master networking concepts and stay updated with industry trends. 🔍 What You'll Learn: • Detailed walkthroughs of networking concepts • Step-by-step Cisco lab exercises using Real Devices, Packet Tracer, GNS3 and EVE-NG • Tips and tricks from experienced network engineers • Real-world networking scenarios and solutions 💡 Why Subscribe? • Regular updates with new and relevant content • Easy-to-follow tutorials that simplify complex topics • Interactive community for networking enthusiasts 📢 Join the Conversation: • Like, comment, and share your thoughts and questions • Follow us on social media for the latest updates and exclusive content • Connect with fellow learners and professionals in the networking field Our Social links:- Website:- https://pmnetworking.in/ Youtube:-    / pmnetworking​​​​​   Facebook:-   / pm.netwoking   Instagram:-   / pm.networking   LinkedIn:   / 1-pm-networking   Telegram:- https://t.me/p_m_networking Whatsapp:- wa.me/918511826341 #ccna #ccnp #ccie #network_troubleshooting #networking_interview #network_configuration #network_engineer #network_engineer_training #cisco_network_configuration #router_configuration #switch_configuration #firewall_configuration #interview_questions_network_engineer #real-time_network_configuration #scenario-based_network #network_troubleshooting #network_troubleshooting_network_engineer #cisco_network_configuration #basic_network