VPN Configs (ESI – Personix)

Personix-STL
PIX 515E
Version 7.2(2)

interface Ethernet0
 nameif outside
 security-level 0
 ip address 209.83.220.252 255.255.255.240

object-group network net_esi-stlouis
 network-object 167.18.17.0 255.255.255.0

object-group network net_esi-bloomington
 network-object 167.18.19.0 255.255.255.0

access-list acl_esi-stlouis extended permit ip 209.83.220.0 255.255.255.224 object-group net_esi-stlouis
access-list acl_esi-bloomington extended permit ip 209.83.220.0 255.255.255.224 object-group net_esi-bloomington

crypto ipsec transform-set 3des-md5 esp-3des esp-md5-hmac

crypto map map_outside 1020 match address acl_esi-stlouis
crypto map map_outside 1020 set peer 167.18.59.254
crypto map map_outside 1020 set transform-set 3des-md5
crypto map map_outside 1020 set security-association lifetime seconds 86400

crypto map map_outside 1021 match address acl_esi-bloomington
crypto map map_outside 1021 set peer 167.18.49.254
crypto map map_outside 1021 set transform-set 3des-md5
crypto map map_outside 1021 set security-association lifetime seconds 86400

crypto map map_outside interface outside
crypto isakmp identity hostname
crypto isakmp enable outside

crypto isakmp policy 40
 authentication pre-share
 encryption 3des
 hash md5
 group 2
 lifetime 28800

tunnel-group 167.18.49.254 type ipsec-l2l
tunnel-group 167.18.49.254 ipsec-attributes
 pre-shared-key *
 isakmp keepalive threshold 10 retry 5

tunnel-group 167.18.59.254 type ipsec-l2l
tunnel-group 167.18.59.254 ipsec-attributes
 pre-shared-key *
 isakmp keepalive threshold 10 retry 5

ESI
Cisco 3800 
Version 12.3(11r).

crypto isakmp policy 1
 encr 3des
 hash md5
 authentication pre-share
 group 2

crypto isakmp policy 2
 encr 3des
 hash md5
 authentication pre-share

crypto isakmp policy 3
 encr 3des
 hash md5
 authentication pre-share
 group 2
 lifetime 3000

crypto isakmp policy 4
 encr 3des
 authentication pre-share
 group 2

crypto isakmp policy 5
 encr 3des
 hash md5
 authentication pre-share
 group 2
 lifetime 28800
 
crypto isakmp key ****** address 209.83.220.252

crypto ipsec transform-set TS1 esp-3des esp-md5-hmac 
crypto ipsec transform-set TS2 esp-3des esp-sha-hmac 
 
crypto map ESI_CMAP 450 ipsec-isakmp 
 description Jerome
 set peer 209.83.220.252
 set security-association lifetime seconds 86400
 set transform-set TS1 
 match address Jerome_VPN
 
ip access-list extended Jerome_VPN
 remark jerome
 permit ip 167.18.19.0 0.0.0.255 209.83.220.0 0.0.0.31