IPSec Config

--SITE A--

Crypto isakmp policy 1
  encr 3des
  authentication pre-share
  group 2
Crypto isakmp key  address SITE_A_IP no-xauth

crypto ipsec transform-set trans esp-3des esp-sha-hmac

Crypto map crypto_map 10 ipsec-isakmp
  set peer SITE_A_IP
  set transform-set trans
  match address ACL_To_Site_B

Interface gi0/1
  crypto map crypto_map

ip access-list extended ACL_To_Site_B
  10 permit ip 192.168.2.0 0.0.3.255 SITE_B_NET 0.0.3.255

--SITE B--

Crypto isakmp policy 1
  encr 3des
  authentication pre-share
  group 2
Crypto isakmp key  address SITE_B_IP no-xauth

crypto ipsec transform-set trans esp-3des esp-sha-hmac

Crypto map crypto_map 10 ipsec-isakmp
  set peer SITE_B_IP
  set transform-set trans
  match address ACL_To_Site_A

Interface Public_Interface
  crypto map crypto_map

ip access-list extended ACL_To_Site_A
  10 permit ip 192.168.1.0 0.0.0.255 SITE_A_NET 0.0.3.255

Leave a Reply