Skip to main content

Remote Access Vpn Configuration


CONFIGURATION


1. Remote User COMMUNICTE PAKISTAN LAN PUBLIC IP : 202.56.215.2  BUT NOT COMMUNICATION ON LAN NETWORK IP  : 192.168.100.1

2.  Remote User PING LAN FTP SERVER  BUT THY DO NOT PING SERVER.

3.  WHEN YOU CONNECTED VPN AND THEN AGAIN PING LAN FTP SERVER . 

___________



________

FIRST REMOTE USER COMMUNICATE ON LAN PUB IP BUT DO NOT COMMUNICATE ON LAN IP.

ALL INTERFECES LINKED UP AND PERFORM ROUTING.

GO TO Company-Router CONFIGURATION MODE.


Router(config)  hostname  Company-Router

CREAT A LOCAL AUTHENTICATION FOR VPN

Company-Router(config)#  aaa new-model

Company-Router(config)#   aaa authentication login WAHAB local

Company-Router(config)#   aaa authorization network HANAN local

Company-Router(config)#    username Manan password Taimoor

CREAT A ISAKMP POLICY FOR VPN

THIS POLICY DEFINES THE ENCRYPTION AND AUTHENTICATION ALGORITHMS THAT WILL BE USED TO PROTECT THE TRAFFIC THAT FLOWS THROUGH THE VPN TUNNEL.

Company-Router(config)#   crypto isakmp policy 10

3DES: TRIPLE DATA ENCRYPTION STANDARD.

 THIS IS A SYMMETRIC ENCRYPTION ALGORITHM THAT USES THREE KEYS TO ENCRYPT DATA.


Company-Router(config-isakmp)#  encryption 3des

Company-Router(config-isakmp)#     hash md5

Company-Router(config-isakmp)#   authentication pre-share

Company-Router(config-isakmp)#    group 2 

Company-Router(config-isakmp)#  exit

CREAT A VPN GROUP AND KEY AND APPLIED IP ADDRESS

Company-Router(config)#   ip local pool VPNPOOL 200.200.200.1 200.200.200.100

Company-Router(config)#   crypto isakmp client configuration group cisco

Company-Router(config-isakmp-group) #  key cisco123

Company-Router(config-isakmp-group)#   pool VPNPOOL

Company-Router(config-isakmp-group)# exit

CREAT A  IPSEC TUNNEL USED TO ENCRYPTED DATA

THIS TRANSFORM SET SPECIFIES THE SPECIFIC ENCRYPTION AND AUTHENTICATION ALGORITHMS THAT WILL BE USED FOR A PARTICULAR TRAFFIC FLOW.

Company-Router(config)#   crypto ipsec transform-set set1 esp-3des esp-md5-hmac

CREAT A MAP FOR VPN

THIS CRYPTO MAP ASSOCIATES AN IPSEC POLICY AND TRANSFORM SET WITH A SPECIFIC INTERFACE.

Company-Router(config)#      crypto dynamic-map map1 10

Company-Router(config-crypto-map)#   set transform-set set1

Company-Router(config-crypto-map)#    reverse-route

Company-Router(config-crypto-map)#  exit

APPLIED AUTHENTICATION AND AUTHORIZATION FOR VPN

Company-Router(config)#   crypto map map1 client configuration address respond

Company-Router(config)#   crypto map map1 client authentication list WAHAB
 
Company-Router(config)#     crypto map map1 isakmp authorization list HANAN

Company-Router(config)#      crypto map map1 10 ipsec-isakmp dynamic map1

VPN CONFIGURATION APPLIED ON INTERFACE

THIS WILL ENABLE IPSEC ON THE INTERFACE AND ALLOW TRAFFIC TO FLOW THROUGH THE VPN TUNNEL.

Company-Router(config)#    interface FastEthernet0/0

Company-Router(config)#     crypto map map1

VPN CONFIGURATION IS DONE GO TO REMOTE USER AND CONNECT VPN AND COMUNICATION CAN BE DONE.



___________



 
 

Comments

Post a Comment

Popular posts from this blog

About Me Information

HELLO FRIENDS, I HOPE YOU ALL ARE DOING WELL. I AM MAKING THIS BLOG FOR THE INFORMATION OF NETWORKING ABOUT. IN THIS BLOG WE WILL READ CCNA (200-301) AND ITS RELATED AND NETWORK RELATED INFORMATION. MY NAME IS ABDUL MANAN JAVED MANJ MY AGE IS 21 YEAR    I AM STUDED ABOUT NETWORK  TECHNOLOGY EMAIL ID : mananrajpoot449@gmail.com CONTACT NO : +923486777628 ADDRESS : ISLAMABAD,G7,KHADA MARKET My Website   My Facebook Account My Facebook Page My Linkedin Profile _____________________________ CONTENT ABOUT  HIS BLOGG 1.  Computer Network 2.   What Is Internet 3.   Network Architecture 4.  Osi Refrence Model 5.  Operating System 6.  Internet Protocol (Ip) 7.  Internet Protocol Types 8.   Port Number 9.  Mac-Address 10.    WHAT IS HUB 11.   WHAT IS SWITCH 12.   WHAT IS ROUTER 13.   WHAT IS NETWORK 14.   NETWORK CABLES 15.   ROUTING 16.  Data Transmission 17...
Post a Comment
Read more

DOS AND DDOS ATTACK

A Dos (Denial-Of-Service) Attack and A DDOS (Distributed Denial-Of-Service) Attack Are Both Attempts to Make a Computer System or Network Resource Unavailable to Legitimate Users. However, They Differ in How They Achieve This: Dos Attack: Imagine A Single Person Throwing Rocks at A Castle Gate. A This Person Represents the Attacker, And the Rocks Represent the Malicious Traffic. The Castle Gate Represents the Target System or Network Resource. The Attacker Keeps Throwing Rocks, Trying to Overwhelm the Gate's Defenses and Gain Entry. Dos Attacks Are Typically Launched from A Single System. They Can Be Effective Against Small Systems or Networks, But Larger Systems Can Often Withstand Them. DDos Attack: Imagine An Army Throwing Rocks at A Castle Gate. This Army Represents the Attacker, And the Rocks Represent the Malicious Traffic. The Castle Gate Represents the Target System or Network Resource. The Attackers Coordinate Their Attack, Throwing Rocks from Multiple Directions at Once. ...
Post a Comment
Read more

CSST COURSE 1.0

Q1. WHAT IS A ADDRESSING. Network addressing is like a two-part delivery system:   Logical Addressing (IP): This is like your permanent address (e.g., 192.168.1.1) that lets data find your device anywhere on the internet. Physical Addressing (MAC): Think of this as a unique ID for your device's network card (AA:BB:CC:DD:EE:FF) used for local delivery within your network. Q2. WHAT IS A PACKET AND FRAME . Packets: Layer: Network Layer (Layer 3) Content: The actual data you want to send, like an email, a video, or website information. Addressing: Contains logical addresses (IP addresses) to identify the sender and receiver on the network. Size: Can vary depending on the data type, but generally larger than frames. Travels across networks: Packets can travel across different networks, like the internet, as they are routed based on IP addresses. Frames: Layer: Data Link Layer (Layer 2) Content: The packet wrapped with additional information for local deliver...
Post a Comment
Read more