Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Remote VPN LAB

Posted on 2011-10-23
Medium Priority
Last Modified: 2012-05-12
I have few Cisco routers 2600 series and few of 3550 switches.
I would like to set up a LAB for VPN Server/Client.

How can I set a home LAB for that?

Question by:jskfan
  • 3
  • 2
LVL 11

Accepted Solution

John Easton earned 668 total points
ID: 37013888
I can't say I have ever set up a VPN lab.  However,  if my assumptions are correct, it does not have to be very complicated.

You will need to decide on some IP address to represent different networks.  For example:
 - 10.0.0.x could represent the Public Internet
 - 10.1.1.x could represent the private network on one side of the VPN
 - 10.1.2.x could represent the private network on the other side of the VPN

As such you would connect the Public or WAN port of each router to a switch and manually enter IP addresses in the Pulic network - i.e. and  These should then be able to 'see' each other and therefore make a VPN connection.

If you also have an internet connection with multiple fixed IP's, you could use these addresses to give more realism to the Lab.

Hope this helps.  Please note this is untried and untested.
LVL 18

Assisted Solution

jmeggers earned 1332 total points
ID: 37013900
You should have a terminal server set up for out of band access into the devices and RDP set up into a PC acting as the client.
LVL 18

Assisted Solution

jmeggers earned 1332 total points
ID: 37014336
Sorry, I misinterpreted your question originally.  First question is whether the 2600 has a crypto image on it.  If not, you'll have to locate one for your model.  

Assuming it does, what you want to do is basically what's shown in http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_configuration_example09186a00801c4246.shtml.  You can get more complex using RADIUS for authentication, etc., but this should give you the basics plus a little more.
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.


Author Comment

ID: 37081111
In the link above, I don't see how you create profiles for each user and deploy it to them., instead of users typing the config manually on the client.

is there a way to deploy the client for each user computer with their profile through Active Directory Group policy?


Author Comment

ID: 37081124

I have Cisco 2600 router series, I don't see WAN ports.

Author Closing Comment

ID: 37200120

Featured Post

Who's Defending Your Organization from Threats?

Protecting against advanced threats requires an IT dream team – a well-oiled machine of people and solutions working together to defend your organization. Download our resource kit today to learn more about the tools you need to build you IT Dream Team!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've written this article to illustrate how we can implement a Dynamic Multipoint VPN (DMVPN) with both hub and spokes having a dynamically assigned non-broadcast multiple-access (NBMA) network IP (public IP). Here is the basic setup of DMVPN Pha…
In the world of WAN, QoS is a pretty important topic for most, if not all, networks. Some WAN technologies have QoS mechanisms built in, but others, such as some L2 WAN's, don't have QoS control in the provider cloud.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

577 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question