Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Webcast-Catalyst9k
New Member

vpn tunnel

Hi all, can anyone please tell me how I would let certain ip's bring up my vpn tunnel, say the other end of the vpn is on a 172.28.x.x network, how would I get my other networks to bring up the tunnel from this end, and which end are the access lists set ?

cheers

3 REPLIES

Re: vpn tunnel

Hi Carl

Can you pls throw more lite on the kinda vpn tunnel you are talking here and also the device model in which you are trying this.

regds

New Member

Re: vpn tunnel

Hi there, Is a normal vpn to vpn tunnel, crypto !!, this is on my cisco 1700 router !!

thankyou

Re: vpn tunnel

Carl,,

ACLs are set at both the ends to define the interesting traffic.. Any traffic which adheres to this ACL will only be allowed on the IPSEC tunnel...

for eg:

access-list 101 permit ip host 192.168.10.38 host 192.168.10.66

crypto map abc 10 ipsec-isakmp

(config-crypto-map)#set peer 192.168.10.38

(config-crypto-map)#set session-key lifetime seconds 4000

(config-crypto-map)#set transform-set aaa

(config-crypto-map)#match address 101

In this case only traffic from 10.38 to 10.66 is allowed..

hope this helps.. all the best.. rate replies if found useful

Raj

138
Views
0
Helpful
3
Replies
CreatePlease to create content