Hello:
I have 3 cisco routers connected to Internet by ADSL and fixed IP and to a LAN and I want to create a Router to router VPN. I've basic knowledge con cisco IOS but I cant make it work.
Office 1 (central office)
192.168.XXX.XXX]-[ROUTER1]
-[10.10.10
.10]-[WAN]
Office 2 (remote 1)
192.169.XXX.XXX]-[ROUTER2]
-[20.20.20
.20]-[WAN]
Office 3 (remote 2)
192.170.XXX.XXX]-[ROUTER3]
-[30.30.30
.30]-[WAN]
(10.10.10.10, 20.20.20.20 and 30.30.30.30 are all public fixed IP addresses and the 192.XXX.0.0 are the inside LAN (the IP of the router is on all ofices 192.XXX.254.254) The XXX changes from one office to another)
Note that the mask (LAN) is 255.255.0.0 (NOT 255.255.255.0) The IPs are for this example (they are not good), the definitive will be others...
We have on all routers the IOS Version 12.2(8)T5 and all are 827 4V
All I want is to be able to ping from every computer on every office to all other computers on other offices as if all the computers where on the same LAN.
As I've readed, the encryption for the VPN may be MD5 or SHA, as I've readed MD5 is faster but provides lower level of security, I prefer to use SHA (if it is the more secure, as I think. If you think I'm wrong, make it with you think is safer)
The routers will need access to internet as now (for the computers in each office to get acces to the internet using their own router (no internet traffic over the VPN link I mean)
The system should be capable to accept more offices when needed.
I suppouse my config files will have a lot of crap so, I'm going to put here the starting configs (only internet conection, nothing on VPN) for office 1 and 2
The accepted answer will be the 3 config files corrected to work in the VPN and if two answers, the cleaner and better commented.
This is very urgent.
Config for Office 1 (central office):
--------------------------
----------
---
!
version 12.1
no service single-slot-reload-enable
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname OFICINA1
!
logging rate-limit console 10 except errors
enable secret 5 ************
!
username ********* password 7 *******************
!
ip subnet-zero
no ip finger
no ip domain-lookup
!
no ip dhcp-client network-discovery
call rsvp-sync
!
voice class codec 1
codec preference 1 g729r8
codec preference 2 g723r63
codec preference 3 g711ulaw
!
!
!
interface Ethernet0
ip address 192.168.254.254 255.255.0.0
ip nat inside
no ip mroute-cache
hold-queue 100 out
!
interface ATM0
ip address 10.10.10.10 255.255.255.0
ip nat outside
no atm ilmi-keepalive
pvc 8/32
protocol ip 10.10.10.2 broadcast
encapsulation aal5snap
!
bundle-enable
dsl operating-mode auto
hold-queue 224 in
!
ip classless
ip route profile
ip route 0.0.0.0 0.0.0.0 10.10.10.2
ip http server
ip http access-class 15
!
ip nat inside source list 1 interface ATM0 overload
!
!
ip nat inside source static tcp 192.168.254.254 23 10.10.10.10 23 extendable
ip nat inside source static udp 192.168.254.254 23 10.10.10.10 23 extendable
!
!
ip nat inside source static tcp 192.168.11.2 5631 10.10.10.10 5631 extendable
ip nat inside source static udp 192.168.11.2 5632 10.10.10.10 5632 extendable
!
!
access-list 1 permit any
access-list 2 permit any
!
voice-port 1
cptone ES
timeouts interdigit 4
!
voice-port 2
cptone ES
timeouts interdigit 4
!
voice-port 3
cptone ES
timeouts interdigit 4
!
voice-port 4
cptone ES
timeouts interdigit 4
!
dial-peer voice 1 pots
destination-pattern 2531
port 1
!
dial-peer voice 2 pots
destination-pattern 2532
port 2
!
dial-peer voice 3 pots
destination-pattern 2533
port 3
!
dial-peer voice 4 pots
destination-pattern 2534
port 4
!
dial-peer voice 2008 voip
shutdown
destination-pattern 254
session target ipv4:81.214.13.22
!
dial-peer voice 5 voip
destination-pattern 666T
session target ipv4:81.214.13.22
!
gateway
!
!
line con 0
exec-timeout 0 0
login
transport input none
stopbits 1
line vty 0 4
session-timeout 60
exec-timeout 0 0
password 7 **************
login
!
scheduler max-task-time 5000
end
Config for Office 2 (remote office 1):
--------------------------
----------
---
!
version 12.1
no service single-slot-reload-enable
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname OFICINA2
!
logging rate-limit console 10 except errors
enable secret 5 ************
!
username ********* password 7 *******************
!
ip subnet-zero
no ip finger
no ip domain-lookup
!
no ip dhcp-client network-discovery
call rsvp-sync
!
voice class codec 1
codec preference 1 g729r8
codec preference 2 g723r63
codec preference 3 g711ulaw
!
!
!
interface Ethernet0
ip address 192.169.254.254 255.255.0.0
ip nat inside
no ip mroute-cache
hold-queue 100 out
!
interface ATM0
ip address 20.20.20.20 255.255.255.0
ip nat outside
no atm ilmi-keepalive
pvc 8/32
protocol ip 20.20.20.2 broadcast
encapsulation aal5snap
!
bundle-enable
dsl operating-mode auto
hold-queue 224 in
!
ip classless
ip route profile
ip route 0.0.0.0 0.0.0.0 20.20.20.2
ip http server
ip http access-class 15
!
ip nat inside source list 1 interface ATM0 overload
!
!
ip nat inside source static tcp 192.169.254.254 23 20.20.20.20 23 extendable
ip nat inside source static udp 192.169.254.254 23 20.20.20.20 23 extendable
!
!
ip nat inside source static tcp 192.169.11.2 5631 20.20.20.20 5631 extendable
ip nat inside source static udp 192.169.11.2 5632 20.20.20.20 5632 extendable
!
!
access-list 1 permit any
access-list 2 permit any
!
voice-port 1
cptone ES
timeouts interdigit 4
!
voice-port 2
cptone ES
timeouts interdigit 4
!
voice-port 3
cptone ES
timeouts interdigit 4
!
voice-port 4
cptone ES
timeouts interdigit 4
!
dial-peer voice 1 pots
destination-pattern 2531
port 1
!
dial-peer voice 2 pots
destination-pattern 2532
port 2
!
dial-peer voice 3 pots
destination-pattern 2533
port 3
!
dial-peer voice 4 pots
destination-pattern 2534
port 4
!
dial-peer voice 2008 voip
shutdown
destination-pattern 254
session target ipv4:81.12.113.212
!
dial-peer voice 5 voip
destination-pattern 666T
session target ipv4:81.12.113.212
!
gateway
!
!
line con 0
exec-timeout 0 0
login
transport input none
stopbits 1
line vty 0 4
session-timeout 60
exec-timeout 0 0
password 7 **************
login
!
scheduler max-task-time 5000
end
Start Free Trial
