cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4392
Views
0
Helpful
3
Replies

Need help with configuring vpn client parameters on cisco 1941

cisco_himg
Level 1
Level 1

Hey all,

I just bought a new 1941 router ISR and need help with configuring parameters for the VPN client. The commands look a little different on here as I am used to configuring ASA and PIX for vpn, not routers...

Can someone help with the commands?

I need to setup:

usernames, group authentication, etc

Thank yoU!

1 Accepted Solution

Accepted Solutions

andrew.prince
Level 10
Level 10

Have a look a the below config examples - everything you need:-

http://www.cisco.com/en/US/products/ps5854/prod_configuration_examples_list.html

HTH>

Andrew.

View solution in original post

3 Replies 3

andrew.prince
Level 10
Level 10

Have a look a the below config examples - everything you need:-

http://www.cisco.com/en/US/products/ps5854/prod_configuration_examples_list.html

HTH>

Andrew.

Todd Pula
Level 7
Level 7

Collin Clark
VIP Alumni
VIP Alumni

crypto isakmp policy 1
encr aes
authentication pre-share
group 2
!

crypto isakmp keepalive 3600 5
crypto isakmp nat keepalive 3600
crypto isakmp xauth timeout 60

!
crypto isakmp client configuration group vpn-client-group
key MySeCrEt
dns 10.1.1.1 10.1.1.2
domain mydomain.com
pool ippool
acl 108
include-local-lan
!
!
crypto ipsec transform-set AES-STRONG esp-aes esp-sha-hmac
!
crypto dynamic-map dynmap 20
set transform-set AES-STRONG
!
crypto map mycompany_vpn client authentication list userauthen
crypto map mycompany_vpn isakmp authorization list groupauthor
crypto map mycompany_vpn client configuration address initiate
crypto map mycompany_vpn client configuration address respond
crypto map mycompany_vpn 20 ipsec-isakmp dynamic dynmap

!
Apply the crpyto map to the interface. Make sure to make the interesting traffic ACL (108 above) and no NAT the traffic. Creat local user accounts with;

username vpn-mmessier secret [vpn password]

Check this link for more examples.

http://www.cisco.com/en/US/tech/tk583/tk372/tech_configuration_examples_list.html#anchor15

Hope it helps.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: