Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Site to Site VPN

Can someone point to good step by step site to site VPN configuraion between:

2800 IOS routers.

All I want to configure site-site VPN with IPSEC tunnel between private networks and NATTING private to public address for the Internet.

What is the valuable show/debug commands to see if tunnel is up or down?

I did most of the configuration, but not able to ping the Private address from hub to spoke. Network Unreachable. When I build the static private routes from hub to spoke or vice versa what will be my gateway address. I know for the default route, it gets pointed to the far end Service Provider router's IP address, but where do I point the gateway address for private networks.



Re: Site to Site VPN

This should help,its a basic template for L2L IPSec, NAT for Internet and of course a firewall.

To see if the tunnel is up, `sh crypto isakmp sa', if its at QM_idle Phase 1 has passed ok.

Then `sh crypto ipsec sa' will indicate if the tunnels have established, look for packets encrypted and decrypted.

Let me know if you need any more help.