Quantcast
Channel: Comments on: Lan-to-Lan IPSEC VPN Between Cisco Routers – Configuration Example
Browsing all 51 articles
Browse latest View live

By: Steve

Thanks for the reply. first of all the the static route can be removed that I know but it should not interfer with the config rigth? The tunnel does not come up it stays down. And I get the error which...

View Article


By: BlogAdmin

can you send us a debug output. Use "<strong>debug crypto isakmp</strong>" and then clear the VPN tunnel using: <strong>clear crypto isakmp sa</strong> <strong>clear...

View Article


By: Steve

Ok Blogadmin thanks very much for the time and support. I figured out what the problem was. When configured as it should with the correct acl for the crypto map, the vpn stayed down until I generated...

View Article

By: Aline

I would like to know if someone already configured a VPN with two links balanced. How can I configure if the interfaces were FastEthernet, because I can´t configure multilink and I´ll have two ip...

View Article

By: Dave

There should not be any problem to configure VPN if the two interfaces were fastethernet

View Article


By: Kunal

I have followed this guide as well as several others and setup both my routers according to them but for some reason I cannot see any connection when I do show crypto isakmp sa. I have tried sending...

View Article

By: Kunal

This is the config for the above mentioned question: version 12.3 service timestamps debug uptime service timestamps log uptime service password-encryption ! hostname Router_A ! boot-start-marker...

View Article

By: Blog Admin

My friend you have not followed exactly the configuration as shown on my post. You must exclude the vpn traffic from nat. ip nat inside source list acl_nat interface Ethernet0/0 overload

View Article


By: Kunal

Admin, Thanks for the quick reply. I would like to say I am brand new to Cisco IOS so please forgive my stupidity (past or future). I added the entry on both routers and still have no activity. The...

View Article


Image may be NSFW.
Clik here to view.

By: SamAwatif

Man Many Many Thanks, I was Confused as to how to go about Allowing IPsec Tunnel While using NAT Since IPsec traffic can’t be natted, I’ve read other blogs but coudn’t get my head around it but your...

View Article

By: BlogAdmin

You must have identical but mirrored access lists on the two end ipsec routers. If on the first router you have “permit ip 192.168.1.0 0.0.0.255 10.1.1.0 0.0.0.255″ then on the second router you must...

View Article

By: Steve

Hi thnx for the response. I have the correct acl in de crypto mapand they are mirrored, but still I get the error “No peer struct to get peer description” And it only works when I set the acl to permit...

View Article

By: BlogAdmin

Steve, Can you please post the part of your configuration related to the ipsec vpn? I need to see it in order to help you. Thanks

View Article


By: Steve

Router-A version 12.4 service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname Router A ! boot-start-marker boot-end-marker resource policy !...

View Article

By: BlogAdmin

The only strange thing on your configuration is the static route on RouterB which points to an internal host: ip route 172.16.10.2 255.255.255.255 FastEthernet0/1 The above is not required. Other than...

View Article


By: Gagan

im very new to cisco Can you help me on this i have to configure site to site vpn with 2 cisco router. Router A using ADSL internet connection (Dynamic IP Address, ADSL modem lan port connected to fe0)...

View Article

By: Blog Admin

Gagan, Although its not officially supported to have ipsec vpn between two dynamic-IP peers, see the following link which might help you. https://supportforums.cisco.com/thread/343363

View Article


By: Tim

Hi i followed the instructions, once i got UP-Idle, once i cleared the session the status went from negotiating to DOWN and i keep getting: No peer struct to get peer description can you please shed...

View Article

By: Blog Admin

Tim, This might have to do with your VPN ACL which is applied in the crypto map. The two VPN ALCs on the two sites must be exactly mirror of each other. Post the config here to take a look. Harris

View Article

Image may be NSFW.
Clik here to view.

By: Tim

Hi Harris, Thanks, for the quick replay, even Cisco Tac wouldn’t had responded so fast I’m sure your way works well, but after going back and forth all day, i chose a different path and it does not...

View Article
Browsing all 51 articles
Browse latest View live


Latest Images