VPN to Three Sites, getting issues with one. Please audit config.

Does anyone see anything wrong with this config? access-list 100 permit ip 172.16.133.0 255.255.255.0 192.168.168.0

255.255.255.0 access-list 100 permit ip 172.16.133.0 255.255.255.0 172.16.135.0 255.255.255.0 access-list 110 permit ip 172.16.133.0 255.255.255.0 192.168.168.0 255.255.255.0 access-list 130 permit ip 172.16.133.0 255.255.255.0 172.16.135.0 255.255.255.0 access-list 140 permit ip host 24.43.199.10 10.1.0.0 255.255.0.0 access-list 140 permit ip host 24.43.199.10 host 192.168.200.10 access-list 140 permit ip host 24.43.199.10 10.10.10.0 255.255.255.0 sysopt connection permit-ipsec crypto ipsec transform-set myset esp-3des esp-md5-hmac crypto map mymap 10 ipsec-isakmp crypto map mymap 10 match address 140 crypto map mymap 10 set peer 64.115.172.99 crypto map mymap 10 set transform-set myset crypto map mymap 20 ipsec-isakmp crypto map mymap 20 match address 110 crypto map mymap 20 set peer 64.115.182.84 crypto map mymap 20 set transform-set myset crypto map mymap 30 ipsec-isakmp crypto map mymap 30 match address 130 crypto map mymap 30 set peer 66.40.19.2 crypto map mymap 30 set transform-set myset crypto map mymap interface outside isakmp enable outside isakmp key ******** address 64.115.172.99 netmask 255.255.255.255 isakmp key ******** address 64.115.182.84 netmask 255.255.255.255 isakmp key ******** address 66.40.19.2 netmask 255.255.255.255 isakmp identity address isakmp policy 10 authentication pre-share isakmp policy 10 encryption 3des isakmp policy 10 hash md5 isakmp policy 10 group 1 isakmp policy 10 lifetime 86400

I can establish tunnels to 20 and 30, but get ACL errors with 10...not sure what the problem could be. Please audit this config. Thanks!

-rws

Reply to
Evolution
Loading thread data ...

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.