1841 Router VPN

Hi There
I have a 1841 Router running C1841-ADVIPSERVICESK9-M ver 12.4(12), is this IOS VPN capable, if not what IOS whould I need to run a VPN?
thanks

Thanks
Not sure yet, waiting to hear back from our partner to see what they support.

Similar Messages

Need help, VPN between 1841 router & PIX 501

Trying to setup a VPN between an 1841 router at HQ with static IP connecting to remote office with a PIX 501 and a persistent IP (not static, but Mediacom has mapped PIX MAC this IP so I always get same public IP even on equip reboot). I have configured both sides but tunnel will not come up, must be missing something.
See attached configs.
THANK YOU!

Sorry.
interface: outside
Crypto map tag: IPSEC, local addr. 12.206.137.5
local ident (addr/mask/prot/port): (10.5.5.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.2.1.0/255.255.255.0/0/0)
current_peer: 216.203.117.82:500
PERMIT, flags={origin_is_acl,}
#pkts encaps: 659, #pkts encrypt: 659, #pkts digest 659
#pkts decaps: 462, #pkts decrypt: 462, #pkts verify 462
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts compr. failed: 0, #pkts decompress failed: 0
#send errors 124, #recv errors 0
local crypto endpt.: 12.206.137.5, remote crypto endpt.: 216.203.117.82
path mtu 1500, ipsec overhead 56, media mtu 1500
current outbound spi: 793ff99e
inbound esp sas:
spi: 0xcbd5b096(3419779222)
transform: esp-des esp-md5-hmac ,
in use settings ={Tunnel, }
slot: 0, conn id: 4, crypto map: IPSEC
IV size: 8 bytes
replay detection support: Y
inbound ah sas:
inbound pcp sas:
outbound esp sas:
spi: 0x793ff99e(2034235806)
transform: esp-des esp-md5-hmac ,
in use settings ={Tunnel, }
slot: 0, conn id: 3, crypto map: IPSEC
sa timing: remaining key lifetime (k/sec): (4607996/1929)
IV size: 8 bytes
replay detection support: Y
outbound ah sas:
local ident (addr/mask/prot/port): (10.5.5.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (216.203.117.85/255.255.255.255/0/0)
current_peer: 216.203.117.82:500
PERMIT, flags={origin_is_acl,}
#pkts encaps: 2691, #pkts encrypt: 2691, #pkts digest 2691
#pkts decaps: 2601, #pkts decrypt: 2601, #pkts verify 2601
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts compr. failed: 0, #pkts decompress failed: 0
#send errors 0, #recv errors 0
local crypto endpt.: 12.206.137.5, remote crypto endpt.: 216.203.117.82
path mtu 1500, ipsec overhead 56, media mtu 1500
current outbound spi: c6d3ea5c
inbound esp sas:
spi: 0x55d659c5(1440111045)
transform: esp-des esp-md5-hmac ,
in use settings ={Tunnel, }
slot: 0, conn id: 1, crypto map: IPSEC
sa timing: remaining key lifetime (k/sec): (4607097/1917)
replay detection support: Y
inbound ah sas:
inbound pcp sas:
outbound esp sas:
spi: 0xc6d3ea5c(3335776860)
transform: esp-des esp-md5-hmac ,
in use settings ={Tunnel, }
slot: 0, conn id: 2, crypto map: IPSEC
sa timing: remaining key lifetime (k/sec): (4607743/1890)
IV size: 8 bytes
replay detection support: Y
outbound ah sas:
outbound pcp sas:

Is 1841 router compatible with wic module U WIC -2MFT –G703 ( 2 E1 ports) ?

Hi frainds
I have cisco 1841 router
1841 Software (C1841-ADVSECURITYK9-M), Version 12.4(3g)
ROM: System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1)
with
2 FastEthernet interfaces
2 Serial(sync/async) interfaces
1 Virtual Private Network (VPN) Module
will this router supoort Uwic 2 mft-g703 card ( with 2 E1ports) ,

These are the following modules supported on the 1841.
http://www.cisco.com/en/US/prod/collateral/routers/ps5853/product_data_sheet0900aecd8016a59b.html
The one you listed only works with the 1700 series which is end of life.
"If this post answers your question, please click the "Correct Answer" button"

DlSW/SDLC 1841 ROUTER.

I have just tried to implement by first 1841 router.
I used the same template that I have for over 400 sites ( 1600 , 1700 , 2500 and 3600 series routers )
I get the dlsw peers established no problem.
The problem is on the serial interface in the router.
It is an IBM 5494 controller .
Here is the configuration that I have for the serial interface.
I have added the routers configuration.
Any ideas??? Is there something that I need to add to the serial interface on the 1841's that was not required before ???
My IOS is (C1841-ENTBASE-M), Version 12.3(11)T2
tks.

Hi,
please open a case with the tac. There have been a few problems with sdlc and 12.3T, also there are some issues depending on the hardware you are using.
The Tac will help you to collect all the needed information to understand your problem and then guide you to a resolution.
thanks...
Matthias

Nat and vlans on 1841 router

i have an old 1605 router that is doing nat for me. e0/0 is my external interface. e0/1 is my internal interface 172.16.0.1 255.255.255.252
i have nat enabled on the router on the 1605r. It works fine when i directly connect a pc to the internal interface.
I have a 1841 router. interface f0/0 172.16.0.2 255.255.255.252 is connected to e0/1 on the 1605r.
Now on the f0/1 of the 1841 i have two subinteraces f0/1.1 10.0.0.1 255.240.0.0
and f0/1.2 192.168.0.1 255.255.255.0
i have dot1q encapsulation on the interfaces with vlan 1/f0/1.1 set to native.
The 2 vlans can talk fine, i can ping each machine on the vlans. But i can only ping as far as 172.16.0.2/ f0/0.
i have a static route set on 1841 router 0.0.0.0 0.0.0.0 172.16.0.1.
Can anyone tell me what im doing wrong.

I believe that the first issue is a routing question on the 1605. When anything on the VLANs of the 1841 attempts to ping to any address on the 1605 the source address of the ping will be 10.0.x.x or will be 192.168.0.x. Is there anything on the 1605 that tells it where this address space is and what interface to use to get to it?
I believe that supplying static routes on the 1605 for ip route 10.0.0.0 255.240.0.0 172.16.0.2 and ip route 192.168.0.0 255.255.255.0 172.16.0.2 will allow devices on the VLANs to ping addresses on the 1605.
If you want the devices on the VLANs to access things beyond the 1605 there is probably another issue. I am guessing that the NAT that you have configured processes the 172.16.0.0 subnet and prbably does not have anything in it about 10.0.0.0 or 192.168.0.0. You will probably have to add to the NAT logic to cover these addresses as well.
HTH
Rick

How to enable routing between HWIC-4ESW and Onboard FE on cisco 1841 router..?

Hello All,
I have a cisco 1841 router, recently i have purchased HWIC-4ESW slot for my router. The module is working fine i could able to see additional FE ports(fe0/0/0,fe0/0/1...).Now problem comes in routing i.e. these HWIC-4ESW ports and Onboard FEs are not communicating.If any bode knows the solution kindly let me know the configuration details..
Thanks,Sazz

Hi,
Look at the configs below.
How can I use IP Routing so communication is possible across all subnets?
Router>en
Router#config t
Router(config)#int fa0/0
Router(config-if)#description ***INTERNET***
Router(config-if)#ip address xxx.xxx.xxx.xxx 255.255.255.252
Router(config-if)#no shut
Router(config-if)#ip nat outside
Router(config-if)#exit
!On-board interface
Router(config)#int fa0/1
Router(config-if)#description ***LAN***
Router(config-if)#ip address 10.0.xxx.xxx 255.255.255.0
Router(config-if)#no shut
Router(config-if)#ip nat inside
Router(config-if)#exit
Router#vlan database
% Warning: It is recommended to configure VLAN from config mode,
as VLAN database mode is being deprecated. Please consult user
documentation for configuring VTP/VLAN in config mode.
Router(vlan)#vlan 10
VLAN 10 modified:
Router(vlan)#vlan 20
VLAN 20 added:
Name: VLAN0020
Router(vlan)#exit
APPLY completed.
Exiting....
Router#config t
Router(config)#int vlan 10
Router(config-if)#ip address 172.16.xxx.xxx 255.255.255.0
Router(config-if)#ip nat inside
Router(config-if)#no shut
Router(config-if)#exit
Router(config)#int vlan 20
Router(config-if)#ip address 192.168.xxx.xxx 255.255.255.0
Router(config-if)#ip nat inside
Router(config-if)#no shut
Router(config-if)#exit
!HwIC-4ESW interface
Router(config)#int fa0/0/0
Router(config-if)#switchport mode access
Router(config-if)#switchport access vlan 10
Router(config-if)#exit
!HWIC-4ESW Interface
Router(config)#int fa0/0/1
Router(config-if)#switchport mode access
Router(config-if)#switchport access vlan 20
Router(config-if)#exit
Router(config)#exit
Router#copy run start
Destination filename [startup-config]?
Building configuration...
[OK]
Router#config t
Router(config)#ip name-server xxx.xxx.xxx.xxx
Router(config)#ip name-server xxx.xxx.xxx.xxx
Router(config)#exit
Regards,

Router to Router VPN with Overlapping internal networks

Hello Experts,
One quick question. How do I configure a Router to Router VPN with overlapping internal networks???
Both of my internal networks have ip address of 192.168.10.0 and 192.168.10.0
Any link or config will be appreciated. I've been looking but no luck.
Thanks,
Randall

Randall,
Please refer the below URL for configuration details:
Configuring an IPSec Tunnel Between Routers with Duplicate LAN Subnets
http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800b07ed.shtml
Let me know if it helps.
Regards,
Arul
** Please rate all helpful posts **

Router-to-Router VPN Security

Hi there,
Should we worry about the the security on router-to-router VPN over internet (IPSec) ?
We have two offices.
Office A has Cisco 2811 router (internal, private) and ASA 5510 firewall.
Office B has Cisco 2821 router (internal, private) and ASA 5505 firewall.
Office B has private subnets that extend to 7 hops away. (running RIP)
If we want to set up a site-to-stie VPN between these two offices, should we set it up on ASA's or routers?
If we set up VPN on routers, does that mean we need to connect one interface to the internet on each router and suffer from Internet attacks?
How do we defend our routers then?
Thanks in advance!
-Andrew

Hi,
when it comes to site to site vpn I usually prefer routers. Whith a little bit of tweaking NAT and routing you should be able to operate a public address on the routers even if they are behind the firewall.
The advantage of IOS based VPN is e.g. the possibility of routing protocols through the VPN tunnels which would give another level of resiliency. Configure tunnel interfaces on the routers with a tunnel mode IPsec and a tunnel protection profile. You can then run e.g. EIGRP to find a possible alternate path if one of the tunnels fails. Its much easier than anything I can think of on the ASA.
Rgds, MiKa

ACL's ON Cisco 1841 Router

Can you let me know what is the maximum no of ACL's that can be configured on Cisco 1841 router ?

Hmm I don't know if such metric is available out there. Perhaps a call/case with Cisco TAC would help! How many ACLs and ACEs do you need/plan to configure?
Thank you for rating helpful posts!

Help needed with AT&T 3G MicroCell going through 1841 Router

I am trying to get an AT&T 3G MicroCell (made by Cisco) to communicate to the Internet through our Cisco 1841 Router.
The router has only basic NAT and no Firewall setting.
The AT&T 3G MicroCell is not a configurable device and it directly connected to a switch port on the router.
DHCP is supplied to it by the router.
We are using Comcast Business Class modem but it is set as a passive gateway pass through device so by passing the router is not an option.
The MicroCell is unable to establish connectivity with the AT&T auto-configuration on the Internet.
So far AT&T support has not been very helpful or knowledgeable.
Anyone have experience with the MicroCell device and connectivity?
They recommend some advanced settings for UPD and TCP ports but the router shows them as open.
It primarily uses ipsec ports
Any ideas?

I have this same issue with the MicroCell plugged directly into the WAN (DHCP) connection to the house from the ISP...................
I also have this same issue with the unit plugged into the DMZ on the router with pass all, all protocol's in and out .....
My problem is GPS related, as in the new 911 database has "virtually" moved my 2 bedroom house 4 miles east of my "physical" location.
Ain't modern tech great......(now if we could just get people great) only problem with high tech is............GARBAGE IN >> GARBAGE OUT........it still depends on "intelligent" life to program everything.

Need help regarding Cisco 1841 Router

hello everyone , i am need of help regarding configuring of FE 0/1 port. our company have a cisco 1841 router. The serial 0/0/0 is connected with VSAT for internet. The FE 0/0 is connected to switch(LAN) through which net connectivity is provided to all users. Recently a new VSAT has been installed at our site,with different IP series. So every time we want to switch between the two net connectivity we need to change the entire IP configuration of all users, which in turn prohibits the users from accessing the printers,data servers etc which are been set to our existing IP series. So, my idea was to configure the FE 0/1, so that just by changing the DNS will help us providing internet along with all other devices without changing the entire IP series. The new VSAT modem has a lan cable which can be connected to FE 0/1. Can any one help out in solving the problem. Our existing IP series is 192.168.3.1..... and the new VSAT series is 10.205.74.1......

Bao
Do I understand correctly that you will have 20 remote users who will telnet to the 2511 and from the 2511 will use reverse telnet to access the console of router1, router2, router3, etc which have their console ports connected to async ports of the 2511? If that understanding is correct then the firewall only needs to open TCP port 23 for telnet. The other ports (2001, 2002, etc) are between the 2511 and router1, router2, etc and will not be seen by the firewall. If my understanding is not correct then please clarify.
I do not believe that you will find an image for the 2500 that supports SSH.
HTH
Rick

1841 router must accept calls NOT dial out

Hi,
I have a 1841 router with WIC-1B S/T interface.The scenario is like people from various countries dialing into the router (by using a number given by the TELCO where the router is physically locted). The router must accept these calls and provide access for internal resources. I am familiar with the scenario of a router dialing out to another router using dialer-string, dialer remote-name, username and password.
But how can the router with WIC-1B S/T be configured to accept analog calls (assuming it is possible).
Pls help with some config examples.
Thx n Regards
Sonu

Hi,
I have tried to fork up some information about it, but unfortunately I haven't found anything. What I'm sure the 2800/3800 series have digital modem PVDM hosting digital modems. It looks the 1800 series does not support it and the only way to terminate analogue calls is to use WIC-xAM modem card but obviously it cannot be used with ISDN line but analogue.
Hope it helps, rate if does
Krisztian
Krisztian

CUCM express on 1841 router?

As this router is an ISR will call manager express work on it ok?
Thanks

Hi Corey,
CME is not supported on the 1841 (minimum 1861)
Here's why;
Both slots on the Cisco 1841 router are HWIC slots and provide compatibility with WICs and multiflex trunk (VWICs) interface cards
(for data only).
VoIP Support
Voice-over-IP (VoIP) pass-through only
http://www.cisco.com/en/US/prod/collateral/routers/ps5853/product_data_sheet0900aecd8016a59b.html
Cheers!
Rob

NAC feature included in 1841 router with security IOS

I'm looking for some guidance, documentation regarding the capabilitys and configuration of NAC on an 1841 router. It looks like it's a software version of NAC that ties to a policy server, maybe an ACS server, or IAS server for example. Is that all it does, in other words, is the capability found mostly on the backend policy server and not the router itself? In that case, what is the router doing, I mean how does it work in relation to NAC? Is it only capable of blocking traffic at layer 3 rather than layer 2 as does 802.1x authentication on a switch of the Clean Access appliance offerred by Cisco?
thank you very much,
Bill

For NAC, the role of a device depends on your network security policy. You can have security applied to any device(s) or you can have it on a policy server which can ensure the security policy. Following link may help you
http://www.cisco.com/application/pdf/en/us/guest/netsol/ns466/c654/cdccont_0900aecd80217e26.pdf

WCCP on 1841 router

Having a problem with a configuration of our guest network and our content filter (S170 IronPort). The 1841 has 3 interfaces. 0/0 is on the LAN side, 0/1/0 is connected to the Ironport, 0/1 is connected to the ISP. So we would like to redirect all traffic from the LAn interface to the Ironport and then out to the internet. For some reason with the configuration below it does not redirect the traffic. When I apply WCCP to the LAN interface it redirects but the cleints stop gettin g internet traffic. Does anyone have any expereince or ideas on how to make this work in the environment?
The ironport is 10.x.5.30 and conneted to fa0/1/0
ip wccp web-cache redirect-list https-cache
ip wccp 80 redirect-list https-cache
interface FastEthernet0/1/0
description WCCP port
ip address 10.x.5.10 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip wccp web-cache redirect in
ip wccp 80 redirect in
no ip nat inside
ip virtual-reassembly
ip route-cache flow
exit
interface FastEthernet0/0
description $ES_LAN$$FW_INSIDE$
ip address 10.x.4.20 255.255.255.0
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
interface FastEthernet0/1
description outside$ETH-WAN$
ip address 50.x.89.145 255.255.255.248
no ip redirects
no ip unreachables
no ip proxy-arp
ip flow ingress
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
no cdp enable
no mop enabled
ip access-list extended https-cache
permit ip 10.245.4.0 0.0.0.255 any
ip route 0.0.0.0 0.0.0.0 50.x.89.150
ip route 10.0.0.0 255.0.0.0 10.x.4.1
ip route 172.16.0.0 255.248.0.0 10.x.4.1

Hi Corey,
CME is not supported on the 1841 (minimum 1861)
Here's why;
Both slots on the Cisco 1841 router are HWIC slots and provide compatibility with WICs and multiflex trunk (VWICs) interface cards
(for data only).
VoIP Support
Voice-over-IP (VoIP) pass-through only
http://www.cisco.com/en/US/prod/collateral/routers/ps5853/product_data_sheet0900aecd8016a59b.html
Cheers!
Rob

1841 Router VPN

Similar Messages

Maybe you are looking for