Contents
How to configure a VPN using IPsec and Generic Routing?
The example in this chapter illustrates the configuration of a site-to-site VPN that uses IPSec and the generic routing encapsulation (GRE) protocol to secure the connection between the branch office and the corporate network. Figure 7-1 shows a typical deployment scenario.
How to configure a VPN on a Cisco router?
VPN configuration information must be configured on both endpoints; for example, on your Cisco router and at the remote user, or on your Cisco router and on another router. You must specify parameters, such as internal IP addresses, internal subnet masks, DHCP server addresses, and Network Address Translation (NAT).
How is a GRE tunnel used in a VPN?
GRE Tunnels GRE tunnels are typically used to establish a VPN between the Cisco router and a remote device that controls access to a private network, such as a corporate network. Traffic forwarded through the GRE tunnel is encapsulated and routed out onto the physical interface of the router.
What is the IP address for a VPN tunnel?
Fast Ethernet or ATM interface—With address 200.1.1.1 (also the outside interface for NAT) LAN interface—Connects to the Internet; with outside interface address of 210.110.101.1
Do you need an ACL for a VPN tunnel?
The outside ACL just permits which Internet host can open/establish a VPN Tunnel but it does not control what is in the Tunnel. 02-21-2006 08:20 AM 02-21-2006 08:20 AM
How is IPSec traffic decrypted before going through the outside ACL?
IPSEC traffic is decrypted before going through the outside acl.When going through the acl, Source and Destination addresses correspond to the real IPs. So to accomplish what you want is easy , just remove the sysopt connection permit-ipsec, and modify your outside acl , using the real IPs as Source and Destination.
How does a VPN work on a Cisco router?
LAN interface—Connects to the corporate network, with inside interface address of 10.1.1.1 GRE tunnels are typically used to establish a VPN between the Cisco router and a remote device that controls access to a private network, such as a corporate network.
How are point to point GRE tunnels used in IPsec?
This design guide focuses on a solution with only two point-to-point (p2p) GRE tunnels per branch terminating to two headend routers, to simplify the routing domain. The IPsec control plane uses dynamic crypto maps at the headend to minimize configuration changes in the event of new branches being added.
How to do dynamic routing over a VPN tunnel?
06-22-2009 03:38 PM This document describes the process of implementing dynamic routing over a VPN tunnel. WHat is Dynamic Routing? Dynamic routing can be defined as a process which renders optimal data routing.
Are there any limitations to using IPsec for tunneling?
Although IPsec provides a secure method for tunneling data across an IP network, it has limitations. IPsec does not support IP broadcast or IP multicast, preventing the use of protocols that rely on these features, such as routing protocols.