Cisco Sample Config File:
Short summary:
ConnectPort WAN VPN to a Cisco IOSbased router. Sections in this document are:. 1. Example diagram and VPN parameters used. 2. Cisco VPN configuration ...
Long summary:
Cisco Sample Config File:Page 1Digi Cellular Router Application Guide: Configuring a VPN connection between aCisco IOS Router and a Digi Cellular RouterIntroduction This is a sample configuration of an IPsec VPN tunnel from a Digi VPN device such as a ConnectPort WAN VPN to a Cisco IOSbased router. Sections in this document are: 1. Example diagram and VPN parameters used. 2. Cisco VPN configuration settings. Knowledge of Cisco IOS is assumed and required. Digi does not provide support for nonDigi device configuration. Embedded notes in the sample config file help describe the settings. 3. Digi cellular devices IPsec WebUI configuration 4. Testing and basic troubleshooting 1. Example Diagram and VPN Parameters CISCOSYSTEMSVPN Parameters: Identity: Mobile IP address (FQDN/FQUN if dynamic IPs are used) PreShared Key: 1s3d4f5g Main mode Encryption/Hash transforms: 3des/md5; des/MD5 DiffieHelman Group: 2 PerfectForward Secrecy (PFS) enabled SA Lifetime 86400 secs. 2. Cisco Sample Config File: This configuration file describes how to setup a configuration to accept a VPN connection from a Digi Connect VPN. Two preshared key definitions are listed: (1) Is for a single static mobile IP address. Multiple entries are needed for each mobile IP address. (2) Covers either a range of static IPs or more likely is used when dynamicmobile IP addresses are used. See the Key section a few lines down. Page 2Sample Cisco Router to Digi Connect / ConnectPort VPN Configpg 2! Cisco Local IP address is 172.10.20.1/24 ! Digi Unit Local IP address (Ethernet) is 192.168.1.1/24 ! ! ISAKMP Phase 1 config: crypto isakmp policy 2 encr 3des hash md5 authentication preshare ! KEY SECTION ! (1) Define the key if a STATIC mobile is used: crypto isakmp key 1s3d4f5g address 166.122.222.111 noxauth ! (2) Define the shared key for a number of mobile devices that share an address ! range. This shared key will work for all devices that have an IP address in ! the subnet: 166.122.0.0/16 This is usefu ...
Source: ftp1.digi.com
Search Terms:
Related
Cisco Router Configuration, Technical manuals and has been a technical
editor on many others. ... Manual Time and
Date Configuration. 286. Network Time
Protocol. 287. Simple Network Time ...,
more
Router Security Configuration Guide, "Cisco Router Security Configuration
Guide," and the management and staff of
... Manual. Central exit. IP addresses
will be shown in the text and in ...,
more
Cisco IOS Switch Security Configuration Guide, Cisco IOS Switch. Security Configuration
Guide. Switch Security ... is only a guide
to recommended security countermeasures
for Cisco IOS switches. It is ...,
more
