[c-nsp] IPSEC VPN

[Enno Rey]

no idea if you need this on the simulator, but on older platforms it was mandatory to "crypto isakmp enable"

thanks,

Enno

On Mon, Aug 10, 2009 at 10:20:57PM +0300, Mohammad Khalil wrote:
> 
> hi
> i configured the below on GNS3 simulator
> 
> Router(config)#crypto isakmp policy 1
> 
> Router(config-isakmp)#authentication pre-share
> Router(config)#crypto isakmp key VPNKEY address x.x.x.x
> 
> Router(config)#access-list extended LIST
> 
> Router(config-list)#permit ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255
> 
> Router(config)#crypto ipsec transform-set SET
> 
> Router(config)#crypto map MAP 10 ipsec-isakmp
> 
> Router(config-crypto-map)#set peer x.x.x.x
> 
> Router(config-crypto-map)#set transform-set SET
> 
> Router(config-crypto-map)#match address LIST
> 
> Router(config)#interface f0/0
> 
> Router(config-if)#crypto map MAP
> 
> and im trying to ping 192.168.2.1 source 192.168.1.1 (loopbacks) but im not able to , and the show crypto isakmp sa produces empty o/p
> 
> am i missing something here ??
> 
> 
>  
> 
> _________________________________________________________________
> Drag n? drop?Get easy photo sharing with Windows Live? Photos.
> 
> http://www.microsoft.com/windows/windowslive/products/photos.aspx
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
-- 
Enno Rey

ERNW GmbH - Breslauer Str. 28 - 69124 Heidelberg - www.ernw.de
Tel. +49 6221 480390 - Fax 6221 419008 - Cell +49 173 6745902
PGP FP 055F B3F3 FE9D 71DD C0D5  444E C611 033E 3296 1CC1

Handelsregister Mannheim: HRB 337135 
Geschaeftsfuehrer: Enno Rey