IPsec VPN Configuration On site B Router = "site-b-gw1" Tunnel protection ipsec profile tunnel-to-dc IPsec VPN Configuration On site A Router = "site-a-gw1" Tunnel protection ipsec profile tunnel-to-site-b Tunnel protection ipsec profile tunnel-to-site-a IPsec VPN Configuration On DC Router = "dc-gw1"Ĭrypto ipsec transform-set AES-256-SHA esp-aes 256 esp-sha-hmac Next is Route-based IPsec VPN configuration for DC router and site routers. Interface And Route Configuration On site B Router = "site-b-gw1" Interface And Route Configuration On site A Router = "site-a-gw1" Interface And Route Configuration On DC Router = "dc-gw1" This simulates underlay Internet links for DC and sites.
I had configured Interface IP's on DC router and site routers and implemented default route towards Internet router.
#Cisco ios xe release 3 to 16 change software#
Site-a-gw1 and site-b-gw1 = Cisco IOS Software, 7200 Software (C7200-ADVENTERPRISEK9-M), Version 12.4(24)T, RELEASE SOFTWARE (fc1) Router IOS version used for this setup are -ĭc-gw1 = Cisco IOS Software, CSR1000V Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.4(2)S, RELEASE SOFTWARE (fc2) We have to configure "inside" and "outside" NAT. Details of IP addresses and device connections are shown in the diagram.ġ) Create Route-based IPSec VPN tunnel between "dc-gw1" in DC to "site-a-gw1" in site A.Ģ) Create Route-based IPSec VPN tunnel between "dc-gw1" in DC to "site-b-gw1" in site B.ģ) Traffic between "app1" server to "user" will be NATed. And two sites (a and b) connect to D C via IPSEC VPN tunnels with the Internet as an underlay. This is an imaginary setup of a company which has Data Centre (DC) with Application and Storage servers.
#Cisco ios xe release 3 to 16 change how to#
In this article, I will show how to build a route-based VPN tunnel. In the previous two parts, I configured simple policy-based VPN tunnels. This is the third article in series about configuring VPN tunnels in IOS XE.
0 kommentar(er)
