Computer Networking Lab | Remote VPN
In this video, I will demonstrate Remote VPN configuration.
**NOTE: Typo in the topology label "Corporate Office".
Commands:
[Config mode]
aaa new-model
aaa authentication login [group name ]local
aaa authorization network [group name] local
Username [user name] secret [password]
#create isakmp policy
crypto isakmp policy [n]
##Note you are now in isak config mode → R1 (Config-isakmp) #
#encryption
encryption aes 256
#hash
hash md5
authentication pre-share
group 2
Lifetime 30600
#Exit out of isakmp config mode
exit
[config mode]
crypto isakmp client configuration group [group name]
#you are now in isakmp-group mode
key [key name]
pool [pool name]
#exit out of isakmp-group mode
[config mode]
crypto ipsec transform-set [set name] esp-aes 256 esp-md5-hmac
Crypto dynamic-map [map name] [n]
#you are now in crypto-map mode
set transform-set [set name]
Reverse-route
#Exit out of crypto-map mode
exit
[Config mode]
crypto map [MAP NAME] client authentication list [group name]
crypto map [MAP NAME] isakmp authorization list [group name]
Crypto map [MAP NAME] client configuration address respond
Crypto map [MAP NAME] [n] Ipsec-isakmp dynamic [dynamic map name]
ip local pool [pool name] [start of pool] [end of pool]
#now apply to interface
#choose the interface of the router receiving the VPN traffic
int [interface]
crypto map [MAP NAME]
#You should get a message that indicates the isakmp is ON