Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

How to migrate VPN settings to another firewall?

Hi guys,

I have problem understanding all these vpn settings.Pls help me if can! Appreciate and Thank you very much! How to perform firewall migration for these vpn settings?

crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac

crypto ipsec transform-set ESP-3DES-sha esp-3des esp-md5-hmac

crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac

crypto dynamic-map outside_dyn_map 20 match address outside_cryptomap_dyn_20

crypto dynamic-map outside_dyn_map 20 set transform-set ESP-3DES-sha

crypto dynamic-map outside_dyn_map 40 set transform-set ESP-3DES-sha

crypto dynamic-map outside_dyn_map 60 match address outside_cryptomap_dyn_60

crypto dynamic-map outside_dyn_map 60 set transform-set ESP-3DES-sha

crypto map outside_map 20 ipsec-isakmp

crypto map outside_map 20 match address outside_cryptomap_20

crypto map outside_map 20 set peer 194.39.131.167

crypto map outside_map 20 set transform-set ESP-3DES-MD5

crypto map outside_map 40 ipsec-isakmp

crypto map outside_map 40 match address outside_cryptomap_40

crypto map outside_map 40 set pfs group2

crypto map outside_map 40 set peer 116.6.17.218

crypto map outside_map 40 set transform-set ESP-3DES-SHA

crypto map outside_map 60 ipsec-isakmp

crypto map outside_map 60 match address outside_cryptomap_60

crypto map outside_map 60 set peer 213.42.236.44

crypto map outside_map 60 set transform-set ESP-3DES-SHA

crypto map outside_map 80 ipsec-isakmp

crypto map outside_map 80 match address outside_cryptomap_80

crypto map outside_map 80 set peer 59.163.35.133

crypto map outside_map 80 set transform-set ESP-3DES-SHA

crypto map outside_map 65535 ipsec-isakmp dynamic outside_dyn_map

crypto map outside_map interface outside

isakmp enable outside

isakmp key ******** address 116.6.17.218 netmask 255.255.255.255 no-xauth no-config-mode

isakmp key ******** address 194.39.131.167 netmask 255.255.255.255 no-xauth no-config-mode

isakmp nat-traversal 10

isakmp policy 10 authentication pre-share

isakmp policy 10 encryption 3des

isakmp policy 10 hash md5

isakmp policy 10 group 2

isakmp policy 10 lifetime 86400

isakmp policy 20 authentication pre-share

isakmp policy 20 encryption 3des

isakmp policy 20 hash sha

isakmp policy 20 group 2

isakmp policy 20 lifetime 86400

vpngroup IF-Infra address-pool pool-infra

vpngroup IF-Infra dns-server 10.3.1.22

vpngroup IF-Infra split-tunnel split-tunnel-infra

vpngroup IF-Infra idle-time 1800

vpngroup IF-Infra password ********

vpngroup IF-APPS address-pool pool-APPS

vpngroup IF-APPS dns-server 10.3.1.22

vpngroup IF-APPS split-tunnel split-tunnel-apps

vpngroup IF-APPS idle-time 1800

vpngroup IF-APPS password ********

vpngroup IF-apps split-tunnel split-tunnel-apps

vpngroup IF-apps idle-time 1800

vpngroup IF-apps password ********

vpngroup IF-APPS2 address-pool pool-APPS2

vpngroup IF-APPS2 dns-server 10.3.1.22

vpngroup IF-APPS2 idle-time 1800

vpngroup IF-APPS2 password ********

vpngroup IF-APPS3 address-pool pool-APPS2

vpngroup IF-APPS3 dns-server 10.3.1.22

vpngroup IF-APPS3 idle-time 1800

vpngroup IF-APPS3 password ********

3 REPLIES

How to migrate VPN settings to another firewall?

Migrating to another cisco FW ?

New Member

How to migrate VPN settings to another firewall?

This is cisco firewall config.I need to migrate to Juniper ISG. I dont know how to interprete the cisco config. Can someone help please?

New Member

Re: How to migrate VPN settings to another firewall?

http://www.cisco.com/en/US/docs/security/pix/pix61/configuration/guide/ipsecint.html

This site will explain how to setup a basic VPN in Cisco. Please go to Juniper website and check the procedure for VPN setup. The config you gave will give you enough info on what type of encryption and group you are using.

Harold

353
Views
0
Helpful
3
Replies
CreatePlease login to create content