====== Cisco: IPSEC Tunel ====== ====== Notatki: ====== ===== 1. Konfigurowanie IKE =====


crypto isakamp enable 
crypto isakamp policy 100
    authentication pre-share
    encryption des
    group 1
    hash md5
    lifetime 86400
    exit

===== 2. Ustalenie Wspólnego Hasła i adresu końcowego punktu tunelu =====


crypto isakamp key cisco123 address 3.0.0.2

show crypto isakamp policy

===== 3. Konfigurowanie paramterów IPsec =====


crypto ipsec transfer-set MINE esp-des
    mode tunnel
    
    exit

show crypto ipsec transfer-set MINE

===== 4. Konfigurowanie crypto ACL =====


access-list 102 permit ip host 2.0.0.1 host 3.0.0.2

===== 5. Konfigurowanie crypto mapy =====


crypto map MYMAP 10 ipsec-isakamp
    match address 102
    set transform-set MINE
    set peer 3.0.0.2
    exit
    
show crypto map

===== 6. Zaaplikowanie crypto-mapy na interfejsie serial (zewnętrznym) =====


interface serial 1/0
    crypto map MYMAP
    exit
    
show crypto ipsec sa
clear crypto sa
debug crypto ipsec 
debug crypto isakamp

===== GNS3 =====