troubleshooting Question

VPN Tunnel Setup Cisco 1841 to Juniper SSG-320

Avatar of MENA ITServices
MENA ITServices asked on
RoutersNetwork ArchitectureInternet Protocol Security
7 Comments1 Solution2272 ViewsLast Modified:
Hi there experts,

We need to setup a VPN tunnel between Cisco Router 1841 and Juniper SSG-320.
Juniper SSG-320 is managed by Verizon (ISP) and will be configured by them so no problems there , we need to configure our end - Cisco 1841 for one of the sites.

Cisco 1841 runs IPSecBundle - (C1841-ADVIPSERVICESK9-M), Version 12.4(9)T5
FE0/0 is local LAN interface
FE0/1 is an interface connected to an ADSL PPPoA modem via static private IP address via one of the four switch ports , ADSL modem gets public WAN IP address dynamically - so it might change.
Based on the info from cisco web site i prepared the config , see below, can you doublecheck and tell me if something is missing or wrong as i'm not a network expert :
Lets assume that remote Juniper IP address is 99.99.99.1 , FE0/1 is assigned 10.2.2.1 , FE0/0 is assigned 10.1.1.1 and that no NAT statements are required as all traffic should be tunnelled including internet traffic:

crypto isakmp policy 1
 hash md5
authentication pre-share
crypto isakmp key xxxxxx address 99.99.99.1


crypto ipsec transform-set specialset esp-des esp-md5-hmac


crypto map remoteVPN 1 ipsec-isakmp  
set peer 99.99.99.1
set transform-set specialset
match address 115


interface Ethernet0/1
ip address 10.2.2.1 255.255.255.0
crypto map remoteVPN

access-list 115 permit ip 10.1.1.0 0.0.0.255 any


Thanks and regards ,

ASKER CERTIFIED SOLUTION
mikecr
IT Architect/Technology Delivery Manager

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 7 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 7 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros