Comments on: How to configure a GRE/IPSec VPN – Part 1

By: Self learning Cisco? Is it possible? « eMulanetwork

Self learning Cisco? Is it possible? « eMulanetwork — Tue, 18 Jan 2011 10:49:07 +0000

[...] How to configure a GRE/IPSec VPN – Part 1 [...]

By: trema

trema — Fri, 17 Dec 2010 05:48:03 +0000

I tried to make it, both using tunnel protection n crypto map, but still I can’t see the encrypt an decrypt packet..I wonder why..

Is there an important config that especially affected the result…?

crypto isakmp key blidngho12 address 0.0.0.0 0.0.0.0

I changed it into my destination address of the tunnel…Should I use 0.0.0.0 ? or maybe I didn’t use the wildcard on it?

By: trema

trema — Fri, 03 Dec 2010 12:49:18 +0000

Josh,

Thank u very much for the answers…^^

1. I will try to remake it first..

2. Thank u very much for the recommendation, I will try to make it in tunnel protection too..by the way, do u have some kind of reference about tunnel protection and crypto map..

Thanks for ur help…I really appreciate it.^^

By: Josh

Josh — Wed, 01 Dec 2010 19:08:31 +0000

Trema,

1. It is hard to tell without more information. There several things that could cause the behavior you are experiencing.

2. Actually, the tunnel protection method is easier and better. I started using it after creating this tutorial. It skips all the access-lists and crypto maps.

crypto isakmp policy 1
authentication pre-share
hash sha
encryption 3des

crypto isakmp key blidngho12 address 0.0.0.0 0.0.0.0

crypto ipsec transform-set 3des-sha esp-3des esp-sha-hmac

crypto ipsec profile GRE-VPN
set transform-set 3des-sha

int Tunnel0
ip address 192.168.200.1 255.255.255.252
tunnel source 12.34.56.78
tunnel destination 23.45.67.89
tunnel protection ipsec profile GRE-VPN

By: trema

trema — Tue, 30 Nov 2010 12:21:58 +0000

I want to ask a few questions :

1. When I setting up my VPN with GRE, like yours, (but I’m using a different routing protocol on it), There’s no packets decrypt or encrypt in mine…Why is that? It’s zero…

2. What’s the difference between IPsec using crypto map and tunnel protection…Do u have some kind of reference for me to read about that issues?

Thanks a lot..

By: blindhog.net » Cisco – How To configure an IPSec VPN

blindhog.net » Cisco – How To configure an IPSec VPN — Mon, 06 Sep 2010 03:49:27 +0000

[...] How to configure a GRE/IPSec VPN – Part 1 [...]

By: frank

frank — Sat, 26 Sep 2009 09:43:54 +0000

hi i need help,
i already follow basic internet 1 & 2.
able to ping cross over routers through ISP.
but however when continue on this tutorial ‘how-to-configure-a-greipsec-vpn-part-1′ i stuck. on the tutorial on ‘Look at the routing’ at ‘D 192.168.1.0/24 [90/297246976] via 192.168.200.1, 00:00:27, Tunnel0′ I don’t have this line. I’m using ISO ‘c3640-jk9o3s-mz.124-16.extracted.bin’

By: frank

frank — Sat, 26 Sep 2009 09:21:38 +0000

@bdk @gabriel,
I had same problem, i can’t make telnet to 192.168.1.1 from R2. Even I can ping cross over ISP from R1 to R2 and other way around. But after make GREIP tunnel from R1 and R2 as for 192.168.200.0 the connection not created.
What I missed?

By: rbary

rbary — Mon, 07 Sep 2009 16:38:17 +0000

Need some help on this tutorial
R2> show ip route
gives a default route to 23.45.67.1 where is this interface connected to

i did not get it

thanks in advance

rbary

By: dinesh vinay

dinesh vinay — Thu, 30 Apr 2009 07:31:06 +0000

wonderful and marvelous…
its very interesting