· 5 years ago · Mar 19, 2020, 01:18 PM
1Creare ACL
2access-list 100 permit ip 192.168.1.0 0.0.0.255 192.168.3.0 0.0.0.255
3
4crypto isakmp policy 10
5 encryption aes 256
6 authentication pre-share
7 group 5
8
9crypto isakmp key secretkey address "IP router LAN opposta"
10
11crypto ipsec transform-set R3-R4 esp-aes 256 esp-sha-hmac
12
13crypto map IPSEC-MAP 10 ipsec-isakmp
14 set peer "IP router LAN opposta"
15 set pfs group5
16 set security-association lifetime seconds 86400
17 set transform-set R1-R3
18 match address 100
19
20interface GigabitEthernet0/0
21 crypto map IPSEC-MAP
22int
23show crypto ?