Polticas para vpn1:

- authentication: pre-share
- algoritmo de encriptacin: AES 256
- algoritmo hash: md5
- grupo DH: 5
- tiempo de vida: 3600 seg.
- clave: cisco1
R1(config)# crypto
R1(config-isakmp)#
R1(config-isakmp)#
R1(config-isakmp)#
R1(config-isakmp)#
R1(config-isakmp)#

isakmp policy 10
authentication pre-share
encryption aes 256
hash md5
group 5
lifetime 3600

R3(config)# crypto
R3(config-isakmp)#
R3(config-isakmp)#
R3(config-isakmp)#
R3(config-isakmp)#
R3(config-isakmp)#

isakmp policy 10
authentication pre-share
encryption aes 256
hash md5
group 5
lifetime 3600

R1(config)# crypto isakmp key cisco1 address 10.0.0.6

R3(config)# crypto isakmp key cisco1 address 10.0.0.1
R1(config)# crypto ipsec transform-set mytrans ah-md5-hmac esp-aes 256 esp-sha-h
mac
R3(config)# crypto ipsec transform-set mytrans ah-md5-hmac esp-aes 256 esp-sha-h
mac
RA(config)#access-list 101 permit ip 172.19.0.0 0.0.0.255 172.21.0.0 0.0.0.255
RB(config)#access-list 101 permit ip 172.21.0.0 0.0.0.255 172.19.0.0 0.0.0.255
R1(config)# crypto map mymap 10 ipsec-isakmp
R1(config-crypto-map)# match address 101
R1(config-crypto-map)# set peer 10.0.0.6
R1(config-crypto-map)# set transform-set mytrans
R1(config-crypto-map)# exit
R1(config)# interface serial 0/0/0
R1(config-if)# crypto map mymap
R3(config)# crypto map mymap 10 ipsec-isakmp
R3(config-crypto-map)# match address 101
R3(config-crypto-map)# set peer 10.0.0.1
R3(config-crypto-map)# set transform-set mytrans
R3(config-crypto-map)# interface serial 0/0/1
R3(config-if)# crypto map mymap
Polticas para vpn2:
- authentication: pre-share
- algoritmo de encriptacin: 3DES
- algoritmo hash: md5
- grupo DH: 5
- tiempo de vida: 3600 seg.
- clave: cisco2

R1(config)# crypto
R1(config-isakmp)#
R1(config-isakmp)#
R1(config-isakmp)#
R1(config-isakmp)#
R1(config-isakmp)#

isakmp policy 20
authentication pre-share
encryption 3des
hash md5
group 5
lifetime 3600

R3(config)# crypto
R3(config-isakmp)#
R3(config-isakmp)#
R3(config-isakmp)#
R3(config-isakmp)#
R3(config-isakmp)#

isakmp policy 20
authentication pre-share
encryption 3des
hash md5
group 5
lifetime 3600

R1(config)# interface tunnel 0

R1(config-if)# ip address 172.20.0.1 255.255.255.0
R1(config-if)# tunnel source serial 0/0/0
R1(config-if)# tunnel destination 10.0.0.10
R3(config)# interface tunnel0
R3(config-if)# ip address 172.20.0.2 255.255.255.0
R3(config-if)# tunnel source serial0/0/0
R3(config-if)# tunnel destination 10.0.0.1
R1(config)# router eigrp 2
R1(config-router)# no auto-summary
R1(config-router)# network 172.16.0.0
network 172.20.0.0
R3(config)# router eigrp 2
R3(config-router)# no auto-summary
R3(config-router)# network 172.17.0.0
network 172.20.0.0
R1(config)# access-list 102 permit gre host 10.0.0.1 host 10.0.0.10
R3(config)# access-list 102 permit gre host 10.0.0.10 host 10.0.0.1
R1(config)# crypto isakmp key cisco2 address 10.0.0.10
R3(config)# crypto isakmp key cisco2 address 10.0.0.1
R1(config)# crypto ipsec transform-set mytran esp-3des esp-md5-hmac
R3(config)# crypto ipsec transform-set mytran esp-3des esp-smd5-hmac
R1(config)# crypto map mymapa 10 ipsec-isakmp
R1(config-crypto-map)# match address 102
R1(config-crypto-map)# set peer 10.0.0.10
R1(config-crypto-map)# set transform-set mytrans
R1(config-crypto-map)# exit
R1(config)# interface serial 0/0/0
R1(config-if)# crypto map mymapa
R3(config)# crypto map
R3(config-crypto-map)#
R3(config-crypto-map)#
R3(config-crypto-map)#
R3(config-crypto-map)#

mymapa 10 ipsec-isakmp
match address 102
set peer 10.0.0.1
set transform-set mytrans
interface serial 0/0/0

R3(config-if)# crypto map mymapa