[c-nsp] Cisco 881 3G Router Experiences

Luan Nguyen luan at netcraftsmen.net
Thu Nov 6 09:56:30 EST 2008


Basically just another DHCP interface IP-wise.
Here's a sample configuration for DMVPN/IPSEC I used for 1841 3G-EVDO.
I used it as a primary connection as well as backup connection.

interface Dialer1
 ip address negotiated
ip virtual-reassembly
 encapsulation ppp
 dialer pool 1
 dialer idle-timeout 0
 dialer string cdma
 dialer persistent
 dialer-group 1
!
interface Cellular0/1/0
 ip address negotiated
ip virtual-reassembly
 encapsulation ppp
 dialer in-band
 dialer pool-member 1
 dialer-group 1
!
crypto isakmp policy 1
 encr aes 256
 authentication pre-share
 group 5
crypto isakmp key test address x.x.x.x
crypto isakmp keepalive 10 4 periodic
!
!
crypto ipsec transform-set cisco esp-aes 256 esp-sha-hmac
 mode transport
!
crypto ipsec profile cisco
 set transform-set cisco
 set pfs group5
!
interface Tunnel0
bandwidth 1000
ip address 10.0.0.2 255.255.255.0
ip mtu 1400
ip nhrp authentication donttell
ip nhrp map 10.0.0.1 x.x.x.x
ip nhrp map multicast x.x.x.x
ip nhrp network-id 99 
ip nhrp holdtime 300
ip nhrp nhs 10.0.0.1
ip tcp adjust-mss 1360
delay 100
tunnel source dialer1
tunnel mode gre multipoint
tunnel key 100000
tunnel protection ipsec profile cisco

You could use IPSEC tunnel mode without DMVPN as well, just make sure the other side configured for dynamic crypto map.

Regards,


Luan Nguyen
Chesapeake NetCraftsmen, LLC.
www.NetCraftsmen.net



-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Anton.Schweitzer at o2.com
Sent: Thursday, November 06, 2008 3:57 AM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] Cisco 881 3G Router Experiences

Hi,

is anybody here using a Cisco 881 3G Router with IPSEC and can share his 
experiences/config with me ?


Cheers

Anton

Anton Schweitzer
Senior Specialist BS Projekt & Service 
Customer Design

o2 (Germany) GmbH & Co.OHG
Georg Brauchle-Ring 23-25, D-80992 München
Tel      +49(0)89-2442-5794
Mobil +49(0)176-23407715
Fax      +49(0)89-2442-4281
anton.schweitzer at o2.com

Telefónica o2 Germany GmbH & Co. OHG • Georg-Brauchle-Ring 23-25 • 80992 
München • Deutschland • www.o2.com/de

Ust.-Id.-Nr. DE 811 889 638. Amtsgericht München HRA 70343. 
Gesellschafter: Telefónica o2 Germany Management GmbH. Amtsgericht München 
HRB 109061 und 
Telefónica o2 Germany Verwaltungs GmbH. Amtsgericht München HRB 121389, 
beide ebenda.
Geschäftsführer beider Gesellschafter: Jaime Smith Basterra, Vorsitzender. 
Antonio Botas Banuelos. Andrea Folgueiras. André Krause. Lutz Schüler. 
Carsten Wreth.
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/



More information about the cisco-nsp mailing list