How to migrate VPN settings to another firewall?

deepoce123 · ‎02-08-2012

Hi guys,

I have problem understanding all these vpn settings.Pls help me if can! Appreciate and Thank you very much! How to perform firewall migration for these vpn settings?

crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac

crypto ipsec transform-set ESP-3DES-sha esp-3des esp-md5-hmac

crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac

crypto dynamic-map outside_dyn_map 20 match address outside_cryptomap_dyn_20

crypto dynamic-map outside_dyn_map 20 set transform-set ESP-3DES-sha

crypto dynamic-map outside_dyn_map 40 set transform-set ESP-3DES-sha

crypto dynamic-map outside_dyn_map 60 match address outside_cryptomap_dyn_60

crypto dynamic-map outside_dyn_map 60 set transform-set ESP-3DES-sha

crypto map outside_map 20 ipsec-isakmp

crypto map outside_map 20 match address outside_cryptomap_20

crypto map outside_map 20 set peer 194.39.131.167

crypto map outside_map 20 set transform-set ESP-3DES-MD5

crypto map outside_map 40 ipsec-isakmp

crypto map outside_map 40 match address outside_cryptomap_40

crypto map outside_map 40 set pfs group2

crypto map outside_map 40 set peer 116.6.17.218

crypto map outside_map 40 set transform-set ESP-3DES-SHA

crypto map outside_map 60 ipsec-isakmp

crypto map outside_map 60 match address outside_cryptomap_60

crypto map outside_map 60 set peer 213.42.236.44

crypto map outside_map 60 set transform-set ESP-3DES-SHA

crypto map outside_map 80 ipsec-isakmp

crypto map outside_map 80 match address outside_cryptomap_80

crypto map outside_map 80 set peer 59.163.35.133

crypto map outside_map 80 set transform-set ESP-3DES-SHA

crypto map outside_map 65535 ipsec-isakmp dynamic outside_dyn_map

crypto map outside_map interface outside

isakmp enable outside

isakmp key ******** address 116.6.17.218 netmask 255.255.255.255 no-xauth no-config-mode

isakmp key ******** address 194.39.131.167 netmask 255.255.255.255 no-xauth no-config-mode

isakmp nat-traversal 10

isakmp policy 10 authentication pre-share

isakmp policy 10 encryption 3des

isakmp policy 10 hash md5

isakmp policy 10 group 2

isakmp policy 10 lifetime 86400

isakmp policy 20 authentication pre-share

isakmp policy 20 encryption 3des

isakmp policy 20 hash sha

isakmp policy 20 group 2

isakmp policy 20 lifetime 86400

vpngroup IF-Infra address-pool pool-infra

vpngroup IF-Infra dns-server 10.3.1.22

vpngroup IF-Infra split-tunnel split-tunnel-infra

vpngroup IF-Infra idle-time 1800

vpngroup IF-Infra password ********

vpngroup IF-APPS address-pool pool-APPS

vpngroup IF-APPS dns-server 10.3.1.22

vpngroup IF-APPS split-tunnel split-tunnel-apps

vpngroup IF-APPS idle-time 1800

vpngroup IF-APPS password ********

vpngroup IF-apps split-tunnel split-tunnel-apps

vpngroup IF-apps idle-time 1800

vpngroup IF-apps password ********

vpngroup IF-APPS2 address-pool pool-APPS2

vpngroup IF-APPS2 dns-server 10.3.1.22

vpngroup IF-APPS2 idle-time 1800

vpngroup IF-APPS2 password ********

vpngroup IF-APPS3 address-pool pool-APPS2

vpngroup IF-APPS3 dns-server 10.3.1.22

vpngroup IF-APPS3 idle-time 1800

vpngroup IF-APPS3 password ********

ajay chauhan · ‎02-09-2012

Migrating to another cisco FW ?

deepoce123 · ‎02-09-2012

This is cisco firewall config.I need to migrate to Juniper ISG. I dont know how to interprete the cisco config. Can someone help please?

haroldgonzales · ‎02-09-2012

http://www.cisco.com/en/US/docs/security/pix/pix61/configuration/guide/ipsecint.html

This site will explain how to setup a basic VPN in Cisco. Please go to Juniper website and check the procedure for VPN setup. The config you gave will give you enough info on what type of encryption and group you are using.

Harold