Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Webcast-Catalyst9k
New Member

ASR1002 to Cisco 1841 encryption issues

I have a scenario where where I have two ASR1002 routers connected over a 2x1gig Wavestream connection. I am currently encrypting these successfully.

One of the ASR routers is connected to a 1841 router (as well) via a 100Meg EES circuit. (Extended Ethernet Circuit). The connection works fine without encryption and works for 10 secs with it on, then stops, and access to the router is lost.

ASR Router encryption config:-

**************************************

crypto isakmp policy 10
encr aes 256
authentication pre-share
crypto isakmp key 345 address 44.83.241.49                    <=== Encryption neighbours on the wavestream circuits ASR to ASR (This works)

crypto isakmp key 345 address 44.83.241.117                  <=== Encryption neighbours on the wavestream circuits ASR to ASR (This works)

crypto isakmp key 123 address 44.83.241.58                    <=== Encryption neighbour with the Cisco 1841

!
crypto ipsec transform-set strong esp-aes 256
!
crypto map broughbuc 10 ipsec-isakmp
set peer 44.83.241.58
set transform-set strong
match address 102
!
crypto map broughfil 10 ipsec-isakmp
set peer 44.83.241.49
set transform-set strong
match address 102
!
crypto map broughfil1 10 ipsec-isakmp
set peer 44.83.241.117
set transform-set strong
match address 102
!

access-list 102 permit ip any any

Cisco 1841 encryption config:-

************************************

crypto isakmp policy 10
encr aes 256
authentication pre-share
crypto isakmp key 123 address 44.83.241.57      <==== Encryption neighbour with the ASR
!
!
crypto ipsec transform-set strong esp-aes 256
!
crypto map broughbuc 10 ipsec-isakmp
set peer 44.83.241.57
set transform-set strong
match address 102
!

access-list 102 permit ip any any

The IOS on the Cisco 1841 is:- (C1841-ADVIPSERVICESK9-M), Version 12.4(18e)

344
Views
0
Helpful
0
Replies
CreatePlease to create content