IPsec VPN Configurations Between Cisco ASA Firewall and Router | IPsec Between Firewall and Router
PM Networking
0:00 / 0:00
IPsec VPN Configurations Between Cisco ASA Firewall and Router | IPsec Between Firewall and Router
1 720 просмотров · 1 год назад
PM Networking
120 тыс. подписчиков
1 720 просмотров · 1 год назад
Join this channel to get access to the perks:
/ @pmnetworking
Site-to-Site IPsec VPN Between ASA and Router
=================================================================
1️⃣ Define Interesting Traffic (Access-list)
access-list VPN_ACL extended permit ip 192.168.1.0 255.255.255.0 192.168.2.0 255.255.255.0
2️⃣ IKEv1 Phase 1 Policy
crypto ikev1 policy 10
encryption aes
hash sha
authentication pre-share
group 2
lifetime 86400
3️⃣ Pre-shared Key
tunnel-group 2.2.2.1 type ipsec-l2l
tunnel-group 2.2.2.1 ipsec-attributes
ikev1 pre-shared-key cisco123
4️⃣ IPSec Phase 2 (Transform Set & Crypto Map)
crypto ipsec ikev1 transform-set VPN_TS esp-aes esp-sha-hmac
crypto map VPN_MAP 10 match address VPN_ACL
crypto map VPN_MAP 10 set peer 2.2.2.1
crypto map VPN_MAP 10 set ikev1 transform-set VPN_TS
crypto map VPN_MAP interface outside
5️⃣ Enable IKEv1 on the Outside Interface
crypto ikev1 enable outside
🔸 Cisco Router (R1) Configuration
1️⃣ Define Interesting Traffic (Access-list)
access-list 100 permit ip 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255
2️⃣ IKEv1 Phase 1 Policy
crypto isakmp policy 10
encr aes
hash sha
authentication pre-share
group 2
lifetime 86400
3️⃣ Pre-shared Key
crypto isakmp key cisco123 address 1.1.1.1
4️⃣ IPSec Phase 2 (Transform Set & Crypto Map)
crypto ipsec transform-set VPN_TS esp-aes esp-sha-hmac
5️⃣ Crypto Map
crypto map VPN_MAP 10 ipsec-isakmp
set peer 1.1.1.1
set transform-set VPN_TS
match address 100
6️⃣ Apply Crypto Map to Interface
interface FastEthernet0/0
crypto map VPN_MAP
🔍 Verification Commands
On ASA
show crypto ikev1 sa
show crypto ipsec sa
On Router
show crypto isakmp sa
show crypto ipsec sa
=========================================
Welcome to PM Networking!
🚀 Dive into the world of networking with us as we bring you comprehensive tutorials, practical lab exercises, and expert insights on Cisco Networking and Cloud Computing. Whether you're a beginner or an experienced professional, our channel is designed to help you master networking concepts and stay updated with industry trends.
🔍 What You'll Learn:
• Detailed walkthroughs of networking concepts
• Step-by-step Cisco lab exercises using Real Devices, Packet Tracer, GNS3 and EVE-NG
• Tips and tricks from experienced network engineers
• Real-world networking scenarios and solutions
💡 Why Subscribe?
• Regular updates with new and relevant content
• Easy-to-follow tutorials that simplify complex topics
• Interactive community for networking enthusiasts
📢 Join the Conversation:
• Like, comment, and share your thoughts and questions
• Follow us on social media for the latest updates and exclusive content
• Connect with fellow learners and professionals in the networking field
Our Social links:-
Website:- https://pmnetworking.in/
Youtube:- / pmnetworking
Facebook:- / pm.netwoking
Instagram:- / pm.networking
LinkedIn: / 1-pm-networking
Telegram:- https://t.me/p_m_networking
Whatsapp:- wa.me/918511826341
#ccna #ccnp #ccie #network_troubleshooting #networking_interview #network_configuration #network_engineer #network_engineer_training #cisco_network_configuration #router_configuration #switch_configuration #firewall_configuration #interview_questions_network_engineer #real-time_network_configuration #scenario-based_network #network_troubleshooting #network_troubleshooting_network_engineer #cisco_network_configuration #basic_network