OpenForum RSS: �� Cisco 3845 � Cisco 1841

�� Cisco 3845 � Cisco 1841 (antacid)

Wed, 08 Oct 2008 19:17:49 GMT

>[�� ]
>>> ip mtu 1400
>>> tunnel source 10.100.2.2
>>> tunnel destination 10.100.2.1
>>> tunnel protection ipsec profile some_profile
>>>end
>>
>>tunnel mode ipsec ipv4 ��
>
>�� .
>crypto isakmp key SOMEVERYSECRETKEY address 10.100.2.1 no-xauth

��, � �� , �ӣ ��-�� , ��, �� , �� .
�� .

�� Cisco 3845 � Cisco 1841 (Eduard_k)

Wed, 08 Oct 2008 15:06:00 GMT

>[�� ]
>>!
>>interface Tunnel0
>> ip address 10.50.2.2 255.255.255.252
>> ip mtu 1400
>> tunnel source 10.100.2.2
>> tunnel destination 10.100.2.1
>> tunnel protection ipsec profile some_profile
>>end
>
>tunnel mode ipsec ipv4 ��

�� .
crypto isakmp key SOMEVERYSECRETKEY address 10.100.2.1 no-xauth

�� Cisco 3845 � Cisco 1841 (Eduard_k)

Wed, 08 Oct 2008 14:58:41 GMT

>[�� ]
>crypto ipsec profile some_profile
> set transform-set some_set
>!
>interface Tunnel0
> ip address 10.50.2.2 255.255.255.252
> ip mtu 1400
> tunnel source 10.100.2.2
> tunnel destination 10.100.2.1
> tunnel protection ipsec profile some_profile
>end

tunnel mode ipsec ipv4 ��

�� Cisco 3845 � Cisco 1841 (max2k1)

Wed, 08 Oct 2008 09:58:58 GMT

�� GRE over IPSEC.

�� A:

crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
!
crypto isakmp key SOMEVERYSECRETKEY address 10.100.2.2
!
crypto ipsec transform-set some_set esp-3des esp-sha-hmac
mode transport
!
crypto ipsec profile some_profile
set transform-set some_set
!
interface Tunnel0
ip address 10.50.2.1 255.255.255.252
ip mtu 1400
tunnel source 10.100.2.1
tunnel destination 10.100.2.2
tunnel protection ipsec profile some_profile
end

�� B:

crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
!
crypto isakmp key SOMEVERYSECRETKEY address 10.100.2.1
!
crypto ipsec transform-set some_set esp-3des esp-sha-hmac
mode transport
!
crypto ipsec profile some_profile
set transform-set some_set
!
interface Tunnel0
ip address 10.50.2.2 255.255.255.252
ip mtu 1400
tunnel source 10.100.2.2
tunnel destination 10.100.2.1
tunnel protection ipsec profile some_profile
end

�� Cisco 3845 � Cisco 1841 (max2k1)

Wed, 08 Oct 2008 09:49:52 GMT

>*Oct 7 07:50:09.643: ISAKMP (0:134217729): ID payload
>*Oct 7 07:50:09.643: ISAKMP:(0:1:SW:1):: peer matches *none* of the profiles
>*Oct 7 07:50:09.643: ISAKMP:(0:1:SW:1): processing SIG payload. message ID = 0
>
>*Oct 7 07:50:09.643: %CRYPTO-3-IKMP_QUERY_KEY: Querying key pair failed.
>*Oct 7 07:50:09.643: ISAKMP (0:134217729): process_rsa_sig: Querying key pair failed.
>�� ?
>��.

�� -�� , �� , �� .

�� Cisco 3845 � Cisco 1841 (antacid)

Tue, 07 Oct 2008 07:52:40 GMT

>[�� ]
>>
>> 0 output errors, 0 collisions, 0 interface
>>resets
>> 0 output buffer failures, 0 output buffers
>>swapped out
>>
>>�� 3845 "line protocol is down"?
>>�� "Fast tunneling enabled/disabled", � �� ?
>
>�� .

��, ��, �� ipsec :)
��, �ӣ ��

ping router1 -> router2

router1#debug crypto isakmp
*Oct 7 07:15:58.907: ISAKMP: received ke message (1/1)
*Oct 7 07:15:58.907: ISAKMP:(0:0:N/A:0): SA request profile is (NULL)
*Oct 7 07:15:58.907: ISAKMP: Created a peer struct for 10.100.2.1, peer port 500
*Oct 7 07:15:58.911: ISAKMP: New peer created peer = 0x637F639C peer_handle = 0x80000007
*Oct 7 07:15:58.911: ISAKMP: Locking peer struct 0x637F639C, IKE refcount 1 for isakmp_initiator
*Oct 7 07:15:58.911: ISAKMP: local port 500, remote port 500
*Oct 7 07:15:58.911: ISAKMP: set new node 0 to QM_IDLE
*Oct 7 07:15:58.911: insert sa

�� Cisco 3845 � Cisco 1841 (Pistonov)

Fri, 03 Oct 2008 07:46:46 GMT

>[�� ]
>0 overrun, 0 ignored, 0 abort
> 15172 packets output, 728256 bytes, 0 underruns
>
> 0 output errors, 0 collisions, 0 interface
>resets
> 0 output buffer failures, 0 output buffers
>swapped out
>
>�� 3845 "line protocol is down"?
>�� "Fast tunneling enabled/disabled", � �� ?

�� .

OpenForum RSS: ������� ����� Cisco 3845 � Cisco 1841

������� ����� Cisco 3845 � Cisco 1841 (antacid)

������� ����� Cisco 3845 � Cisco 1841 (Eduard_k)

������� ����� Cisco 3845 � Cisco 1841 (Eduard_k)

������� ����� Cisco 3845 � Cisco 1841 (max2k1)

������� ����� Cisco 3845 � Cisco 1841 (max2k1)

������� ����� Cisco 3845 � Cisco 1841 (antacid)

������� ����� Cisco 3845 � Cisco 1841 (Pistonov)

OpenForum RSS: �� Cisco 3845 � Cisco 1841

�� Cisco 3845 � Cisco 1841 (antacid)

�� Cisco 3845 � Cisco 1841 (Eduard_k)

�� Cisco 3845 � Cisco 1841 (Eduard_k)

�� Cisco 3845 � Cisco 1841 (max2k1)

�� Cisco 3845 � Cisco 1841 (max2k1)

�� Cisco 3845 � Cisco 1841 (antacid)

�� Cisco 3845 � Cisco 1841 (Pistonov)