Scribd
Upload
8 views8 pages

GETVPN Configuration for ISP Routers

The document describes the configuration of several ISP and spoke routers to establish an IPsec VPN using GETVPN. The ISP routers are configured with OSPF routing and static routes. The spoke routers are configured with tunnel interfaces and crypto maps to connect to the hub and establish an encrypted VPN tunnel.

Uploaded by

JavierLozaLluco
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
8 views8 pages

GETVPN Configuration for ISP Routers

The document describes the configuration of several ISP and spoke routers to establish an IPsec VPN using GETVPN. The ISP routers are configured with OSPF routing and static routes. The spoke routers are configured with tunnel interfaces and crypto maps to connect to the hub and establish an encrypted VPN tunnel.

Uploaded by

JavierLozaLluco
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd

**************************************************************

GETVPN
**************************************************************
--------------------------------------------------------------
ISP-1
--------------------------------------------------------------
enable
conf t
hostname ISP-1
int e0/0
ip add [Link] [Link]
no shut
ip ospf 10 area 0
exit
int e0/1
ip add [Link] [Link]
no shut
ip ospf 10 area 0
exit
int e0/2
ip add [Link] [Link]
no shut
ip ospf 10 area 0
exit
int e0/3
ip add [Link] [Link]
no shut
ip ospf 10 area 0
exit
int e1/0
ip add [Link] [Link]
no shut
ip ospf 10 area 0
exit
int e1/1
ip add [Link] [Link]
no shut
ip ospf 10 area 0
exit
router ospf 10
router-id [Link]
exit
--------------------------------------------------------------
ISP-2
--------------------------------------------------------------
enable
conf t
hostname ISP-2
int e0/0
ip add [Link] [Link]
no shut
ip ospf 10 area 0
exit
int e0/1
ip add [Link] [Link]
no shut
exit
ip route [Link] [Link] [Link]
router ospf 10
router-id [Link]
redistribute static
exit
--------------------------------------------------------------
ISP-3
--------------------------------------------------------------
enable
conf t
hostname ISP-3
int e0/0
ip add [Link] [Link]
no shut
ip ospf 10 area 0
exit
int e0/1
ip add [Link] [Link]
no shut
IP OSP
exit
ip route [Link] [Link] [Link]
router ospf 10
router-id [Link]
redistribute static
exit
--------------------------------------------------------------
ISP-4
--------------------------------------------------------------
enable
conf t
hostname ISP-4
int e0/0
ip add [Link] [Link]
no shut
ip ospf 10 area 0
exit
int e0/1
ip add [Link] [Link]
no shut
exit
ip route [Link] [Link] [Link]
router ospf 10
router-id [Link]
redistribute static
exit
--------------------------------------------------------------
ISP-5
--------------------------------------------------------------
enable
conf t
hostname ISP-5
int e0/0
ip add [Link] [Link]
no shut
ip ospf 10 area 0
exit
int e0/1
ip add [Link] [Link]
no shut
exit
ip route [Link] [Link] [Link]
router ospf 10
router-id [Link]
default-information originate
exit
--------------------------------------------------------------
ISP-6
--------------------------------------------------------------
enable
conf t
hostname ISP-6
int e0/0
ip add [Link] [Link]
no shut
ip ospf 10 area 0
exit
int e0/1
ip add [Link] [Link]
no shut
exit
ip route [Link] [Link] [Link]
router ospf 10
router-id [Link]
redistribute static
exit
--------------------------------------------------------------
ISP-7
--------------------------------------------------------------
enable
conf t
hostname ISP-7
int e0/0
ip add [Link] [Link]
no shut
ip ospf 10 area 0
exit
int e0/1
ip add [Link] [Link]
no shut
exit
ip route [Link] [Link] [Link]
router ospf 10
router-id [Link]
redistribute static
exit
--------------------------------------------------------------
SPK-1
--------------------------------------------------------------
enable
conf t
hostname SKP-1
int e0/0
ip add [Link] [Link]
no shut
exit
int e0/1
ip add [Link] [Link]
no shut
exit
ip route [Link] [Link] [Link]

interface tunnel0
ip add [Link] [Link]
ip nhrp map [Link] [Link]
ip nhrp map multicast [Link]
ip nhrp network-id 1
ip nhrp nhs [Link]
tunnel source [Link]
tunnel mode gre multipoint
exit

crypto isakmp policy 1


authentication pre-share
encryption aes
group 2
hash sha
lifetime 86400
exit
crypto isakmp key GETVPN address [Link]
crypto gdoi group GETVPN-GROUP
identity number 1234
server address ipv4 [Link]
crypto map GETVPN-MAP 10 gdoi
set group GETVPN-GROUP
interface ethernet0/0
crypto map GETVPN-MAP
--------------------------------------------------------------
SPK-2
--------------------------------------------------------------
enable
conf t
hostname SKP-2
int e0/0
ip add [Link] [Link]
no shut
exit
int e0/1
ip add [Link] [Link]
no shut
exit
ip route [Link] [Link] [Link]

interface tunnel0
ip add [Link] [Link]
ip nhrp map [Link] [Link]
ip nhrp map multicast [Link]
ip nhrp network-id 1
ip nhrp nhs [Link]
tunnel source [Link]
tunnel mode gre multipoint
exit

crypto isakmp policy 1


authentication pre-share
encryption aes
group 2
hash sha
lifetime 86400
exit
crypto isakmp key GETVPN address [Link]
crypto gdoi group GETVPN-GROUP
identity number 1234
server address ipv4 [Link]
crypto map GETVPN-MAP 10 gdoi
set group GETVPN-GROUP
interface ethernet0/0
crypto map GETVPN-MAP
--------------------------------------------------------------
SPK-3
--------------------------------------------------------------
enable
conf t
hostname SKP-3
int e0/0
ip add [Link] [Link]
no shut
exit
int e0/1
ip add [Link] [Link]
no shut
exit
ip route [Link] [Link] [Link]

interface tunnel0
ip add [Link] [Link]
ip nhrp map [Link] [Link]
ip nhrp map multicast [Link]
ip nhrp network-id 1
ip nhrp nhs [Link]
tunnel source [Link]
tunnel mode gre multipoint
exit

crypto isakmp policy 1


authentication pre-share
encryption aes
group 2
hash sha
lifetime 86400
exit
crypto isakmp key GETVPN address [Link]
crypto gdoi group GETVPN-GROUP
identity number 1234
server address ipv4 [Link]
crypto map GETVPN-MAP 10 gdoi
set group GETVPN-GROUP
interface ethernet0/0
crypto map GETVPN-MAP
--------------------------------------------------------------
SPK-4
--------------------------------------------------------------
enable
conf t
hostname SKP-4
int e0/0
ip add [Link] [Link]
no shut
exit
int e0/1
ip add [Link] [Link]
no shut
exit
ip route [Link] [Link] [Link]

interface tunnel0
ip add [Link] [Link]
ip nhrp map [Link] [Link]
ip nhrp map multicast [Link]
ip nhrp network-id 1
ip nhrp nhs [Link]
tunnel source [Link]
tunnel mode gre multipoint
exit

crypto isakmp policy 1


authentication pre-share
encryption aes
group 2
hash sha
lifetime 86400
exit
crypto isakmp key GETVPN address [Link]
crypto gdoi group GETVPN-GROUP
identity number 1234
server address ipv4 [Link]
crypto map GETVPN-MAP 10 gdoi
set group GETVPN-GROUP
interface ethernet0/0
crypto map GETVPN-MAP
--------------------------------------------------------------
SPK-5
--------------------------------------------------------------
enable
conf t
hostname SKP-5
int e0/0
ip add [Link] [Link]
no shut
exit
int e0/1
ip add [Link] [Link]
no shut
exit
ip route [Link] [Link] [Link]

interface tunnel0
ip add [Link] [Link]
ip nhrp map [Link] [Link]
ip nhrp map multicast [Link]
ip nhrp network-id 1
ip nhrp nhs [Link]
tunnel source [Link]
tunnel mode gre multipoint
exit

crypto isakmp policy 1


authentication pre-share
encryption aes
group 2
hash sha
lifetime 86400
exit
crypto isakmp key GETVPN address [Link]
crypto ipsec transform-set GETVPN-GROUP esp-aes esp-sha-hmac
exit
crypto gdoi group GETVPN-GROUP
identity number 1234
server address ipv4 [Link]
exit
crypto map GETVPN-MAP 10 gdoi
set group GETVPN-GROUP
exit
interface ethernet0/0
crypto map GETVPN-MAP
exit
--------------------------------------------------------------
HUB
--------------------------------------------------------------
enable
conf t
hostname HUB
int e0/0
ip add [Link] [Link]
no shut
exit
int e0/1
ip add [Link] [Link]
no shut
exit
ip route [Link] [Link] [Link]

interface tunnel0
ip add [Link] [Link]
ip nhrp map multicast dynamic
ip nhrp network-id 1
tunnel source [Link]
tunnel mode gre multipoint
exit

crypto isakmp policy 1


authen pre-share
encryption aes
hash sha
group 2
exit
crypto isakmp key GETVPN address [Link]
crypto isakmp key GETVPN address [Link]
crypto isakmp key GETVPN address [Link]
crypto isakmp key GETVPN address [Link]
crypto isakmp key GETVPN address [Link]
crypto key generate rsa modulus 1024 label GETVPN-RSA
access-list 101 permit icmp any any
exit

crypto ipsec transform-set GETVPN-GROUP esp-aes esp-sha-hmac


exit
crypto ipsec profile GETVPN-PROFILE
set transform-set GETVPN-GROUP
exit
crypto gdoi group GETVPN-GROUP
identity number 1234
server local
rekey authentication mypubkey rsa GETVPN-RSA
rekey transport unicast
address ipv4 [Link]
sa ipsec 1
profile GETVPN-PROFILE
match address ipv4 101
replay counter
no tag
--------------------------------------------------------------
Webterm-1
--------------------------------------------------------------
ifconfig eth0 [Link] netmask [Link]
route add default gw [Link]
--------------------------------------------------------------
Webterm-2
--------------------------------------------------------------
ifconfig eth0 [Link] netmask [Link]
route add default gw [Link]
--------------------------------------------------------------
Webterm-3
--------------------------------------------------------------
ifconfig eth0 [Link] netmask [Link]
route add default gw [Link]
--------------------------------------------------------------
Webterm-4
--------------------------------------------------------------
ifconfig eth0 [Link] netmask [Link]
route add default gw [Link]
--------------------------------------------------------------
Webterm-5
--------------------------------------------------------------
ifconfig eth0 [Link] netmask [Link]
route add default gw [Link]
--------------------------------------------------------------

You might also like