Site to Site VPN Konfiguration
pix# en
pix# conf te
pix# access-list 60 permit ip 10.0.1.0 255.255.255.0 192.168.91.0 255.255.255.0
pix# sysopt connection permit-ipsec
pix# crypto ipsec transform-set strong esp-3des esp-sha-hmac
pix# crypto map toPartners 10 ipsec-isakmp
pix# crypto map toPartners 10 match address 60
pix# crypto map toPartners 10 set peer 10.0.0.1
pix# crypto map toPartners 10 set transform-set strong
pix# crypto map toPartners interface outside
pix# isakmp enable outside
pix# isakmp key $up3r$3cr3tp@$$w0rd address 10.0.0.1 netmask 255.255.255.255
pix# isakmp policy 8 authentication pre-share
pix# isakmp policy 8 encryption 3des
pix# isakmp policy 8 hash sha
pix# isakmp policy 8 group 1
pix# isakmp policy 8 lifetime 86400
VPN Konfiguration überprüfen
pix# sh isa sa
Total : 1
Embryonic : 0
dst src state pending created
10.0.0.1 192.168.90.254 QM_IDLE 0 2
pix# sh ips sa
pix# sh cry isa pol
Protection suite of priority 8
encryption algorithm: Three key triple
DES
hash algorithm: Secure Hash Standard
authentication method: Pre-Shared Key
Diffie-Hellman group: #1 (768 bit)
lifetime: 86400 seconds, no volume limit
Default protection suite
encryption algorithm: DES - Data Encryption Standard (56 bit keys)
hash algorithm: Secure Hash Standard
authentication method: Rivest-Shamir-Adleman Signature
Diffie-Hellman group: #1 (768 bit)
lifetime: 86400 seconds, no volume limit