05-24-2010 04:09 AM
Hi,
i try to configure and open a tunnel in ipsec following the user guide but i'm not able to make it works.
I have two wrv210 in two different locations. Bth take internet connection throguh a Draytek Vigor e2700 (provide by the ISP).
Every WRV210 is connected in DHCP like Gateway and if i connect a PC or a Phone to them they gives internet connection
Every location has a static IP address
I give you the configuration
LOCATION 1
STATIC IP: 77.43.34.XXX
DRAYTEK ROUTER (ISP) ADDRESS: 10.0.0.1 / 255.255.255.0
WRV210 DHCP ADDRESS: 10.0.0.12
WRV210 LOCAL ADDRESS: 192.168.1.1 /255.255.255.0
LOCATION 2
STATIC IP: 77.43.42.XXX
DRAYTEK ROUTER (ISP) ADDRESS: 192.168.1.1 / 255.255.255.0
WRV210 DHCP ADDRESS: 192.168.1.219
WRV210 LOCAL ADDRESS: 192.168.0.1 /255.255.255.0
BOTH WRV210 HAVE FIRMWARE 2.0.0.11
IN DRAYTEK ROUTER CONFIGURATION I OPEN PORTS FOR WRV ADDRESSES FROM 0 TO 60999 BOTH TCP AND UDP
IN VPN IPSEC CONFIGURATION I GIVE THE FOLLOW INSTRUCTIONS
CONFIGURATION
KEY EXCHANGE: AUTOMATIC (IKE)
OPERATION MODE: PRINCIPAL
CRITT ISAKMP: 3DES
AUTENTIC ISAKMP: MD5
ISAKMP GROUP: GROUP 2 1024 BIT
KEY DURAITON: 3600
PFS: DISABLED
IPSEC CRITT: AUTOMATIC
KEY DURATION IPSEC: 3600
PRE-CONDIVIDED KEY: conatifranceschetti
IN ALL KIND OF CONFIGURATION I TRY TO GIVE THE TUNNEL REMAIN IN STATUS : T
AND NOT OPEN
HOW CAN I CONFIGURE AND OPEN THIS TUNNEL??
THANKS IN ADVANCE
05-24-2010 05:31 AM
Hi,
i try to configure and open a tunnel in ipsec following the user guide but i'm not able to make it works.
I have two wrv210 in two different locations. Bth take internet connection throguh a Draytek Vigor e2700 (provide by the ISP).
Every WRV210 is connected in DHCP like Gateway and if i connect a PC or a Phone to them they gives internet connection
Every location has a static IP address
I give you the configuration
LOCATION 1
STATIC IP: 77.43.34.XXX
DRAYTEK ROUTER (ISP) ADDRESS: 10.0.0.1 / 255.255.255.0
WRV210 DHCP ADDRESS: 10.0.0.12
WRV210 LOCAL ADDRESS: 192.168.1.1 /255.255.255.0
LOCATION 2
STATIC IP: 77.43.42.XXX
DRAYTEK ROUTER (ISP) ADDRESS: 192.168.1.1 / 255.255.255.0
WRV210 DHCP ADDRESS: 192.168.1.219
WRV210 LOCAL ADDRESS: 192.168.0.1 /255.255.255.0
BOTH WRV210 HAVE FIRMWARE 2.0.0.11
IN DRAYTEK ROUTER CONFIGURATION I OPEN PORTS FOR WRV ADDRESSES FROM 0 TO 60999 BOTH TCP AND UDP
IN VPN IPSEC CONFIGURATION I GIVE THE FOLLOW INSTRUCTIONS
CONFIGURATION
KEY EXCHANGE: AUTOMATIC (IKE)
OPERATION MODE: PRINCIPAL
CRITT ISAKMP: 3DES
AUTENTIC ISAKMP: MD5
ISAKMP GROUP: GROUP 2
Hi,
Check out the below link for step by step configiguration ip sec site to site configuration on routers
http://www.petri.co.il/how-to-configure-ipsec-encryption-with-cisco-ios.htm
Hope to Help !!
Ganesh.H
Remember to rate the helpful post
05-24-2010 11:09 PM
Sorry but the page that you send to me was not helpful. I don't comprehend how can i set my routers to create the VPN.
I hope that somkeone of Cisco Technical Assistance give me a response...
Thanks anyway ganeshh
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide