Hi I am trying to get ready to implement a VPN on the router so remote users can access the network where the 1841 router is located.
I found an example for this on the Internet see below.
I have a few questions:
- Will this work on my 1841 ?
- I presume in this example FastEthernet 0/1 is the interface connected to the internet?
Any information will be helpful,
Thanks.
Router1#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router1(config)#aaa new-model Router1(config)#aaa authentication login default group tacacs+ Router1(config)#aaa authentication enable default group tacacs+ Router1(config)#tacacs-server host 172.25.1.1 Router1(config)#tacacs-server key COOKBOOK Router1(config)#crypto isakmp policy 10 Router1(config-isakmp)#encryption 3des Router1(config-isakmp)#authentication pre-share Router1(config-isakmp)#group 2 Router1(config-isakmp)#exit Router1(config)#crypto ipsec transform-set VPN-TRANSFORMS ah-sha-hmac esp-sha-hmac esp-3des Router1(cfg-crypto-trans)#mode tunnel Router1(cfg-crypto-trans)#exit Router1(config)#crypto dynamic-map VPN-USER-MAP 50 Router1(config-crypto-map)#description A dynamic crypto map for VPN users Router1(config-crypto-map)#match address 115 Router1(config-crypto-map)#set transform-set VPN-TRANSFORMS Router1(config-crypto-map)#exit Router1(config)#access-list 115 deny any 224.0.0.0 35.255.255.255 Router1(config)#access-list 115 deny any 172.25.1.255 0.0.0.0 Router1(config)#access-list 115 permit any any Router1(config)#crypto map CRYPTOMAP 10 ipsec-isakmp dynamic VPN-USER-MAP Router1(config)#interface FastEthernet0/1 Router1(config-if)#ip address 172.25.1.5 255.255.255.0 Router1(config-if)#crypto map CRYPTOMAP Router1(config-if)#exit Router1(config)#exit Router1#