DISEÑO DE REDES

RED DE GESTION
DISEÑO DE REDES
VPN
DISEÑO DE REDES
VPN
DISEÑO DE REDES
VPN
DISEÑO DE REDES
VPN
aaa new-model
!
!
aaa authentication login default group tacacs+ local
aaa authentication login vpn-usuarios group radius local
aaa authentication ppp default group tacacs+ local
aaa authorization exec default group tacacs+ local
aaa authorization network vpn-grupo local
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa accounting network vpn-quien start-stop group tacacs+
!
aaa session-id common
!
crypto isakmp policy 1
encr 3des
hash md5
authentication pre-share
group 2
!
crypto isakmp client configuration group DISEÑO
key inacap123
domain gtdinternet.com
pool pool-acceso-cisco
acl ACCESO
!
crypto ipsec transform-set TRANSFORMACION esp-3des esp-md5-hmac
!
crypto dynamic-map dynmap 1
set transform-set TRANSFORMACION
!
!
DISEÑO DE REDES
VPN

crypto map VPN client authentication list vpn-usuarios

crypto map VPN client accounting list vpn-quien
crypto map VPN isakmp authorization list vpn-grupo
crypto map VPN client configuration address initiate
crypto map VPN client configuration address respond
crypto map VPN 1 ipsec-isakmp dynamic dynmap

interface GigabitEthernet0/0
crypto map VPN

ip local pool pool-acceso-cisco 172.32.1.1 172.32.1.255

ip access-list extended ACCESO

permit ip 192.168.X.0 0.0.0.255 172.32.1.0 0.0.0.255