Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Can't establish IPSec VPN tunnel over T1 WAN

hi folks,

We have a WAN simluation with two 2600s back to back. When clients are on the same subnet as router A ..... they can establish a connection. When they are behind Router B and have to go over the T1 they can't establish a connection. Is there anything that I need to do to enable IP Sec over the T1?

What sort of logging can I turn on , on either router to see what's going on?

thanks

7 REPLIES
New Member

Re: Can't establish IPSec VPN tunnel over T1 WAN

Hi,

Try to figure out how far your security associations have been established. use the command

"show crypto isakmp sa"

If possible post the same here.First your ISAKMP SA's should be successful then your IPSec.

Regds

New Member

Re: Can't establish IPSec VPN tunnel over T1 WAN

thanks for responding.

I took a stab at that cmd but it doesn't exist. I was in exec mode like I should be. I have IOS ver 12.0 (5).

any ideas? ......

thanks

VIP Purple

Re: Can't establish IPSec VPN tunnel over T1 WAN

Can you post a ´sh ver´? And possibly the configs ? If the ´sh crypto isakmp sa´ command doesn´t exist you most likely don´t have the right IOS.

Regards,

Georg

New Member

Re: Can't establish IPSec VPN tunnel over T1 WAN

here is the sh ver output

ver

Cisco Internetwork Operating System Software

IOS (tm) C2600 Software (C2600-I-M), Version 12.0(5)T1, RELEASE SOFTWARE (fc1)

Copyright (c) 1986-1999 by cisco Systems, Inc.

Compiled Tue 17-Aug-99 13:57 by cmong

Image text-base: 0x80008088, data-base: 0x8072C5D4

ROM: System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1)

RouterB uptime is 2 weeks, 6 days, 8 hours, 25 minutes

System returned to ROM by power-on

System image file is "flash:c2600-i-mz.120-5.T1"

cisco 2610 (MPC860) processor (revision 0x202) with 20480K/4096K bytes of memory.

Processor board ID JAB0335083U (362528331)

M860 processor: part number 0, mask 49

Bridging software.

X.25 software, Version 3.0.0.

Basic Rate ISDN software, Version 1.1.

1 Ethernet/IEEE 802.3 interface(s)

1 Serial network interface(s)

1 ISDN Basic Rate interface(s)

32K bytes of non-volatile configuration memory.

--More-- 8192K bytes of processor board System flash (Read/Write)

Configuration register is 0x2102

RouterB#

many thanks again

New Member

Re: Can't establish IPSec VPN tunnel over T1 WAN

Hi,

The IOS shown here has just "IP" feature; does not support encryption.

Try to upgrade you IOS to "IP PLUS IPsec 56" or "IP PLUS IPsec 3DES" which support encryption.

Regds

New Member

Re: Can't establish IPSec VPN tunnel over T1 WAN

many thanks ... I'll give that a shot

New Member

Re: Can't establish IPSec VPN tunnel over T1 WAN

hi again, I can't seem to access the IOS images. do you think you can email it to me at oalexis@dar.org?

many thanks

107
Views
0
Helpful
7
Replies