Site to Site VPN Konfiguration

pix# en
pix# conf te
pix# access-list 60 permit ip 10.0.1.0 255.255.255.0 192.168.91.0 255.255.255.0
pix# sysopt connection permit-ipsec
pix# crypto ipsec transform-set strong esp-3des esp-sha-hmac
pix# crypto map toPartners 10 ipsec-isakmp
pix# crypto map toPartners 10 match address 60
pix# crypto map toPartners 10 set peer 10.0.0.1
pix# crypto map toPartners 10 set transform-set strong
pix# crypto map toPartners interface outside
pix# isakmp enable outside
pix# isakmp key $up3r$3cr3tp@$$w0rd address 10.0.0.1 netmask 255.255.255.255
pix# isakmp policy 8 authentication pre-share
pix# isakmp policy 8 encryption 3des
pix# isakmp policy 8 hash sha
pix# isakmp policy 8 group 1
pix# isakmp policy 8 lifetime 86400

VPN Konfiguration überprüfen

pix# sh isa sa
Total     : 1
Embryonic : 0
        dst             src          state       pending    created
  10.0.0.1         192.168.90.254    QM_IDLE         0           2

pix# sh ips sa

pix# sh cry isa pol
Protection suite of priority 8
      encryption algorithm:  Three key triple DES
      hash algorithm:        Secure Hash Standard
      authentication method: Pre-Shared Key
      Diffie-Hellman group:  #1 (768 bit)
      lifetime:              86400 seconds, no volume limit
Default protection suite
      encryption algorithm:  DES - Data Encryption Standard (56 bit keys)
      hash algorithm:        Secure Hash Standard
      authentication method: Rivest-Shamir-Adleman Signature
      Diffie-Hellman group:  #1 (768 bit)
      lifetime:              86400 seconds, no volume limit



Grundlagen
Konfiguration
Logging
PDM
VPN
Tutorials
Thawte Web of Trust Notary

CAcert SSL Security

d