Need help about VPN config

Hello to everyone,

I am new to this forum. I need your help about my VPN configs. I try these configs on real equipment, also on Dynamics but my VPN doesn't comes up. There is my configs.

***********R1***********
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
crypto isakmp key 1927612864128345963222275963022268412375563912654222376 address 172.16.10.1

crypto ipsec transform-set LAB-IPsec esp-des esp-md5-hmac

crypto map VPN-1 10 ipsec-isakmp
set peer 172.16.10.1
set transform-set BLACK-IPsec
match address 101

interface Tunnel0
bandwidth 1536
ip address 10.50.102.1 255.255.255.252
ip access-group 150 out
keepalive 10 3
tunnel source 172.16.10.2
tunnel destination 172.16.10.1
crypto map VPN-1

interface Serial0/0/1
bandwidth 1536
ip address 172.16.10.2 255.255.255.252


access-list 101 permit gre host 172.16.10.2 host 172.16.10.1
access-list 150 permit ip any any



**********R2***********
crypto isakmp policy 10                       
encr 3des         
authentication pre-share                        
group 2        

crypto isakmp key 1927612864128345963222275963022268412375563912654222376 address 172.16.10.2  
                                                           
crypto ipsec transform-set LAB-IPsec esp-des esp-md5-hmac

crypto map VPN-1 10 ipsec-isakmp                                
set peer 172.16.10.2                     
set transform-set BLACK-IPsec                              
match address 101  

interface Tunnel0                 
bandwidth 1536               
ip address 10.50.102.2 255.255.255.252                                       
ip access-group 150 out                        
keepalive 10 3               
tunnel source 172.16.10.1                          
tunnel destination 172.16.10.2                              
crypto map VPN-1  


interface Serial0/0/0                                             
bandwidth 1536               
ip address 172.16.10.1 255.255.255.252


access-list 101 permit gre host 172.16.10.1 host 172.16.10.2
access-list 150 permit ip any any

My tunnel and serial interfaces are up. I can ping across then, but when I enter command
show crypto sessions then my statusOWN.

Need immediate help.

返回顶部
CopyRight © 2009 CCNA Live

Powered by Discuz! 7.2 © 2008 Comsenz Inc.

Contact Us - Clear Cookies - Stats - Archiver - WAP

GMT+8, 2018-4-19 19:05.