How to configure Easy VPN using Cisco Router?

Cisco Easy VPN solutions provides a secure connection over the public network to the off-site users. Easy VPN is a proper client-server model, that is why we will try to perform maximum configurations on the sever end and use Cisco VPN client software at user end to establish connection.

Basic steps for Easy VPN Configuration:

1- First configure the Router interface

Interface name
Security level
IP address
Enable crypto isakmp on Router

2- Configure IP pool

Pool name
Range of IP addresses to be used in pool

3- Configure user accounts

Username
Password

3- First define the ISAKMP Policy.

Authentication
Hash
Encryption
Group

4- Establish IPsec transform set.

Esp-des
Esp-md5-hmac
Esp-aes
Asp-sha-hmac

5- Now apply crypto map on the outside interface.

(Used to verify the outgoing interface traffic)

Router(config)# aaa new-model

Router(config)# username Mark password champion

(define username and password)

Router(config)# aaa authentication login default local

Router(config)# aaa authorization network star local

Now defined the IKE polices on Router

Router(config)#crypto isakmp policy 10

(10 is isakmp policy number)

Router(config-isakmp)#encryption des

(enable encryption des)

Router(config-isakmp)#hash md5

(enable algorithm md5 for hashing)

Router(config-isakmp)#authentication pre-share

(enable Pre-shared method)

Router(config-isakmp)#group 2

(enable diffie-Helman group 2)

Router(config-isakmp)#exit

Router(config)# crypto isakmp key champion address 0.0.0.0

Router(config)# crypto ipsec transform-set ts2 esp-des esp-md5-hmac

(Here encryption type is des and hashing technique is md5-hmac)

Router(config)# ip local pool poolname 30.1.1.1-30.1.1.50

(define IP pool)

Router(config)# crypto isakmp client configuration group star

Router(config-group)# pool poolname

Router(config-group)# key champion

Router(config-group)# exit

Router(config)# crypto isakmp client configuration address-pool local poolname

Router(config)# crypto dynamic-map dmap 10

Router(config-map)# set transform-set tset

Router(config-map)# exit

Router(config)# crypto map smap 10 ipsec-isakmp dynamic map dmap

Router(config)# crypto map smap client authentication list champion
Router(config)# crypto map smap isakmp authorization list champion
Router(config)# crypto map smap client configuration address respond

Router(config)# interface serial 0/0

Router(config)# crypto map smap

Router(config)# ip route 30.0.0.0 255.0.0.0 serial 0/0

Now to verify the secure tunnel, dial connection from user end using the Cisco VPN client software

Yesterday Tip.

How to enable password and compression feature in windows XP?

COMPUTER TIPS