[c-nsp] Cisco 881 3G Router Experiences
Luan Nguyen
luan at netcraftsmen.net
Thu Nov 6 09:56:30 EST 2008
Basically just another DHCP interface IP-wise.
Here's a sample configuration for DMVPN/IPSEC I used for 1841 3G-EVDO.
I used it as a primary connection as well as backup connection.
interface Dialer1
ip address negotiated
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer idle-timeout 0
dialer string cdma
dialer persistent
dialer-group 1
!
interface Cellular0/1/0
ip address negotiated
ip virtual-reassembly
encapsulation ppp
dialer in-band
dialer pool-member 1
dialer-group 1
!
crypto isakmp policy 1
encr aes 256
authentication pre-share
group 5
crypto isakmp key test address x.x.x.x
crypto isakmp keepalive 10 4 periodic
!
!
crypto ipsec transform-set cisco esp-aes 256 esp-sha-hmac
mode transport
!
crypto ipsec profile cisco
set transform-set cisco
set pfs group5
!
interface Tunnel0
bandwidth 1000
ip address 10.0.0.2 255.255.255.0
ip mtu 1400
ip nhrp authentication donttell
ip nhrp map 10.0.0.1 x.x.x.x
ip nhrp map multicast x.x.x.x
ip nhrp network-id 99
ip nhrp holdtime 300
ip nhrp nhs 10.0.0.1
ip tcp adjust-mss 1360
delay 100
tunnel source dialer1
tunnel mode gre multipoint
tunnel key 100000
tunnel protection ipsec profile cisco
You could use IPSEC tunnel mode without DMVPN as well, just make sure the other side configured for dynamic crypto map.
Regards,
Luan Nguyen
Chesapeake NetCraftsmen, LLC.
www.NetCraftsmen.net
-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Anton.Schweitzer at o2.com
Sent: Thursday, November 06, 2008 3:57 AM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] Cisco 881 3G Router Experiences
Hi,
is anybody here using a Cisco 881 3G Router with IPSEC and can share his
experiences/config with me ?
Cheers
Anton
Anton Schweitzer
Senior Specialist BS Projekt & Service
Customer Design
o2 (Germany) GmbH & Co.OHG
Georg Brauchle-Ring 23-25, D-80992 München
Tel +49(0)89-2442-5794
Mobil +49(0)176-23407715
Fax +49(0)89-2442-4281
anton.schweitzer at o2.com
Telefónica o2 Germany GmbH & Co. OHG • Georg-Brauchle-Ring 23-25 • 80992
München • Deutschland • www.o2.com/de
Ust.-Id.-Nr. DE 811 889 638. Amtsgericht München HRA 70343.
Gesellschafter: Telefónica o2 Germany Management GmbH. Amtsgericht München
HRB 109061 und
Telefónica o2 Germany Verwaltungs GmbH. Amtsgericht München HRB 121389,
beide ebenda.
Geschäftsführer beider Gesellschafter: Jaime Smith Basterra, Vorsitzender.
Antonio Botas Banuelos. Andrea Folgueiras. André Krause. Lutz Schüler.
Carsten Wreth.
_______________________________________________
cisco-nsp mailing list cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
More information about the cisco-nsp
mailing list