Como crear una vpn site to site entre dos router cisco 2800

[juanes790415]

hola amigos, les pido el favor y me digan todo lo referente a este tema acerca de algun manual o tutorial donde se explique como conectar dos router cisco 2800 a traves de una vpn site to site.

Saludos

[maxsteell9550]

Using 5845 out of 245752 bytes
!
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname XXXXXXXXXX
!
boot-start-marker
boot system flash c2800nm-advsecurityk9-mz.124-3i.bin
boot-end-marker
!
logging buffered 51200 warnings
enable secret 5 $1$3yZR$1qwFCRWONTB19QwOe/CiZ1
!
aaa new-model
!
!
aaa authentication banner ^C

aaa authentication login userauthen local
aaa authorization network groupauthor local
!
aaa session-id common
!
resource policy
!
clock timezone GMT 4
ip subnet-zero
no ip source-route
ip tcp synwait-time 10
!
!
ip cef
!
!
ip flow-cache timeout active 1
no ip bootp server
ip domain name xxxxxxx
!
!
!
crypto pki trustpoint TP-self-signed-2189834410
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2189834410
revocation-check none
rsakeypair TP-self-signed-2189834410
!
!
username xxxx privilege 15 secret 5 xxxxxxxxxx
username xxxx password 7 xxxxxxxx
username xxxx password 7 xxxxxxxx
username xxxx password 7 xxxxxxxx
!
!
!
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
!
crypto isakmp policy 30
encr 3des
authentication pre-share
group 2
crypto isakmp key 6 xxxxxx address xxxxxx no-xauth
crypto isakmp identity hostname
!
crypto isakmp client configuration group xxxxxx
key xxxxxx
pool ippool
acl 150
!
!
crypto ipsec transform-set myset esp-3des esp-sha-hmac
mode transport
crypto ipsec transform-set remote esp-3des esp-sha-hmac
!
crypto dynamic-map dynmap 10
set transform-set remote
reverse-route
!
!
crypto map clientmap client authentication list userauthen
crypto map clientmap isakmp authorization list groupauthor
crypto map clientmap client configuration address respond
crypto map clientmap 10 ipsec-isakmp dynamic dynmap
crypto map clientmap 30 ipsec-isakmp
set peer xxxxxxxx
set transform-set myset
match address xxxxxx
!
!
!
interface FastEthernet0/0
description connected to OUTSIDE (ISP) 1M Leased Line
ip address xxxxxxxxx xxxxxxxxx
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly
ip route-cache flow
duplex auto
speed auto
no mop enabled
!
interface FastEthernet0/1
description Connected to LAN
ip address xxxxxx xxxxxxxx
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip virtual-reassembly
ip route-cache flow
duplex auto
speed auto
!
ip local pool ippool xxxxx xxxxxxxx
ip local pool ippool xxxxxx xxxxxxxx
ip default-gateway xxxxxxxxxx
ip classless
ip route xxxxxxxxxxxxxxxxxxxx
!
ip http server
ip http access-class 23
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip access-list extended jed-to-hq
permit ip xxxxxxxxxxxxxxxxxxxxxxxxxxxxx
permit ip xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
permit ip xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
ip access-list extended nonat
deny ip xxxxxxxxxxxxxxxxxxxxxxxxxxxx
deny ip xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
deny ip xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
!
access-list 23 permit xxxxxxxxxxxxx
!
!
control-plane
!
!
!
line con 0
password 7 xxxxxxxxxxxxxxxxxxxxxxxxxxx
transport output telnet
line aux 0
password 7 xxxxxxxxxxxxxxxxxxxxxxxxxxx
transport output telnet
line vty 0 4
privilege level 15
password 7 xxxxxxxxxxxxxxxxxxx
transport input telnet ssh
transport output all
line vty 5 15
access-class 23 in
privilege level 15
password 7 xxxxxxxxxxxxxxxxxxxxxxxxxx
transport input telnet ssh
transport output none
!
scheduler allocate 20000 1000
!
end

[maxsteell9550]

aunque te recomiendo leer en la misma pagina de cisco el material que tiene..

http://www.cisco.com/en/US/products/...ples_list.html



saludos =)