GRE on router 800 serie

I have a question how can you GRE tunnel on a cisco router 800 series set for a site to site vpn ipsec + gre who can help me?

Please change highlighted line below.
R1
crypto isakmp policy 1
encr aes 256
authentication pre-share
group 2
crypto isakmp key key address 84.197.161.59 <<<<<<<<< I assume, this is your R2 public address.
Please copy the highlighted line on Router R1.
crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
crypto map OUTSIDE-CRYTPO 1 ipsec-isakmp
set peer 84.197.161.59 <<<<<<<<<< Do the same, and make sure you put the R2 public address.
set transform-set ESP-AES-128-SHA
set pfs group5
match address 100
reverse-route
access-list 100 permit ip host xxx.xxx.xxx.xxx host 84.197.161.59 < x is on acl 100 is public address of the R1.
interface Tunnel0
ip address 11.11.11.1 255.255.255.252
ip ospf mtu-ignore
keepalive 3 2
tunnel source GigabitEthernet0
tunnel destination 84.197.161.59 <<<<<<<<<<<<<<<<<< this is router R2's public address.
ip mtu 1400
interface GigabitEthernet0
crypto map OUTSIDE-CRYTPO
Please change highlighted line below R2
crypto isakmp policy 1
encr aes 256
authentication pre-share
group 2
crypto isakmp key key address xxx.xxx.xxx.xxx <<<<<<<<<<<<< R1 public address.
Please copy the highlighted line on R2.
crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
crypto map OUTSIDE-CRYTPO 1 ipsec-isakmp
set peer xxx.xxx.xxx.xxx <<<<<<<<<<<<<<<<< R1 public address.
set transform-set ESP-AES-128-SHA
set pfs group5
match address 100
reverse-route
access-list 100 permit ip host 84.197.161.59 host xxx.xxx.xxx.xxx << X is R1 public ip address.
interface Tunnel0
ip address 11.11.11.2 255.255.255.252
ip ospf mtu-ignore
keepalive 3 2
ip mtu 1400
tunnel source GigabitEthernet0
tunnel destination xxx.xxx.xxx.xxx <<<<<<<<<<< X is public address of the R1.
interface GigabitEthernet0
crypto map OUTSIDE-CRYTPO
Hope that helps.
thanks

Similar Messages

How do I restrict access to Wireless router (800 series) by mac address

I hope I'm in the correct area.
I'm trying to deny access to 3 wireless devices to the cisco 800 series wireless router
The MAC address are:
MAC Address    IP address      Device        Name            Parent         State
0014.6caf.410a 192.168.2.26    unknown       -               self           Assoc
9803.d8ba.cd42 192.168.2.41    unknown       -               self           Assoc
a4d1.d205.72e1 192.168.2.25    unknown
If this cannot be done is it poosible to assign the mac address to an ip address and then denying access to the ip address.
Thanks
Jon

Hello Jon,
You should be able to do it either way. Best way would be by IP address so you do not even allow the host to associate with your AP.
Looking for some Networking Assistance?
Contact me directly at [email protected]
I will fix your problem ASAP.
Cheers,
Julio Carvajal Segura
http://laguiadelnetworking.com

Question about setting up rdp using a cisco 800 series router

HI there,
I am currently in school for networking. One co-op placement I went too handed me a cisco 800 series router to practice my routing skills on. I am trying to setup RDP so I can access my server from outside my internal network. I ran this following acl command to do it.
ip nat inside source static tcp server IP address port# cable modem IP port # extendable.
My question here is, my cable modem will occasionally hand out a different IP since it has DCHP. I cannot turn DHCP off in my cable modem. So is there a way I can set this up to use a dynamic IP from my modem so I alwasy have access to it or every time my modem changes the IP address do I have to go in and modify this acl?

Configure DDNS ( Dynamic DNS ) on the router. For this you need to register with a DDNS provider. Go to
http://www.no-ip.com/ . they provide free reliable service.
With DDNS, Once your router gets a DHCP address from your ISP , it will dynamically update the DNS name record. For example if you register you routers name as, "myrouter.no-ip.org", from there onwards whatever the IP your router gets, you can refer to that by this name.
So do as what Paolo said regarding using interface instead of ip, and register with the DDNS and you are good to go..
Hope this helps
Please rate this post if helpful..
Thanks
Shamal

Can I terminate 40 Mbps DSL BROAD BAND connection in Cisco 800 series routers

Dear all,
Can I terminate 40 Mbps DSL BROAD BAND connection in Cisco 800 series router?.It is not a leased line.
Which Router model is best for 40 Mbps DSL Broad band termination ?
Thanks&Regards
Ajay Jose K

Hi ,
Below link provides you all model in 800 series .
http://www.cisco.com/c/en/us/support/routers/800-series-routers/tsd-products-support-series-home.html
For your requirement below model should suffice .
Complete throughput from the router is 51 Mbps .
Cisco C891FW Integrated Services Router
HTH
Sandy

Troubles with 800 series AAA config

hey all,
I have attempted to configure our 800 series router to accept client to router vpns into our network. However the clients just dont connect, no error message either. I am a little lost what to do, any help would be Massively appreciate as ive already tried experts exchange and they cant see anything wrong with it. I have attached the config to this message.
kind regards
Matt
UK

hi
i feel you have posted the main hub site config where your remote locations dials in and establish the ipsec tunnel.
But in your case the hub ip is not static you are getting the ip address from SP in this case how your remote clients will negotiate the isakmp and ipsec policies when they dont have a static peer ip configured in their configuration ?
untill unless you have a static ip configuredi n ur hub site i dont think its possible at all for your remote peers to negotiate the key thigns to establish the ipsec connectivity.
regds

Connecting 800 series through a sr520

hi there
i have a demroom set up which includes a sr520 as the edge router connecting to the ISP and i have a uc 560 connected to that which is working fine
i also have a new business edition 3000 and a 800 series router which im looking to connect to the sr 520 for access to the ISP as the 800 series doesn't have a ADSL line on it .i have given the 800 series routers wan interface a static address of 192.168.75.14 wich is from the address range in the sr520s default vlan and excluded the address from the DHCP pool. now from the ccp express on the 800 s i can ping the wan port of the 800 s and the default vlan/gateway of the sr520 and the wan ip of the sr520 but no further also once i try pinging it from the cmd on windows i cant ping any further that the wan interface on the 800 s . i was hoping some one could help me with this as im not to sure where to go next

hi andy
thanks for getting back to me .yes the wan port fe 4 on the 800 is 192.168.75.14 and i have a default route sending the traffic out fe4 the wan port to the next hop address 192.168.75.1 the default address/vlan of the sr520
i have selected the wan port as the outside interface but have not configured nat.
the reason i have used the 800 at all is that the be3000 needs a router that has C.U.B.E (cisco unifyed border element)
and the sr520 doesnt also i only have one broadband line that uses adsl which the 800s doesnt support so i thought it would be easy enough just to directly connect the 800 to the sr520 put in a few static route and that would be it
but like i mentioned before i can ping the wan port of the sr520 from the ios of the 800 even googles dns 8.8.8.8 but get no internet connection and when i ping the wan interface from the sr520 its successful it seems to be from the wan port on the 800 and the 800s default vlan/gateway 10.10.10.1 wich is have some difficulty passing traffic
any ideas would be more that welcome
regards
lee

IPV6 on 800 serie

hello I have a question'm trying on my 800 series to configure ipv6 know something that you can do the vlans?

Hi,
Can you post output of debug ipv6 nd ?
conf t
logging on
logging buffered 100000 debug
do clear log
do debug ipv6 nd
int vlan x
shut
no shut
do sh log ( after a few mins) post output here
also post your config:
have you enabled ipv6 routing? ---> ipv6 unicast-routing
have you enabled ipv6 RAs ? --->
int vlan x
no ipv6 nd suppress-ra
Regards.
Alain
Don't forget to rate helpful posts.

Confusion around PoE module for 800 series

There seems to be a lot of confusion around the PoE module for the Cisco 800 series routers
I'd like to know if the Cisco 887VA and 897VAW routers can have the internal PoE module fitted as an after sale item?
I see reference to 800-IL-PM-4= but searching for that amongst suppliers seems to show an external Power injector that connects to 4 Ethernet ports on the router and then from there you connect the external devices.
What I want to get is the internal daughtercard that adds PoE to the router itself.
Can anyone help me identify the right part please?

You can get the PoE daughter card pre-fitted before the appliance leaves the factory or you can do it yourself as an after-sales item.
800-IL-PM-4 is the daughter card. Read the Q & A below:
Q. Can the PoE be upgraded after ordering?
A. Yes, you can upgrade the PoE on all models except the C892FSP-K9, which does not support PoE at all. For all Cisco 890 Routers, the product ID (PID) for the PoE upgrade is 800-IL-PM-4=. This PID comes with two power supply options: 80 or 125 watts. The older CISCO890 requires the 80-watt option, whereas the newer C890 requires the 125-watt option.
Q. Why do some routers use 80 watts and others 125 watts for PoE?
A. The 80-watt power supply is used in addition to the standard 60-watt power supply, so you will have two power supplies connected to the router. For the newer routers we combined these two power supplies into the one 125-watt power supply (hence we have a 4-pin connector). Both models support the base router as well as 4 ports with standard PoE.

Wireless module on 800 series reboot

I have a wireless problem on the 800 series and with two PCs connected to the wireless router and you're a 40GB file to send by second PC over the wireless module does away is this normal?

You can get the PoE daughter card pre-fitted before the appliance leaves the factory or you can do it yourself as an after-sales item.
800-IL-PM-4 is the daughter card. Read the Q & A below:
Q. Can the PoE be upgraded after ordering?
A. Yes, you can upgrade the PoE on all models except the C892FSP-K9, which does not support PoE at all. For all Cisco 890 Routers, the product ID (PID) for the PoE upgrade is 800-IL-PM-4=. This PID comes with two power supply options: 80 or 125 watts. The older CISCO890 requires the 80-watt option, whereas the newer C890 requires the 125-watt option.
Q. Why do some routers use 80 watts and others 125 watts for PoE?
A. The 80-watt power supply is used in addition to the standard 60-watt power supply, so you will have two power supplies connected to the router. For the newer routers we combined these two power supplies into the one 125-watt power supply (hence we have a 4-pin connector). Both models support the base router as well as 4 ports with standard PoE.

Cisco router 26xx series

hello,
1- could i use a cisco router 26xx series as a gatekeeper ( tis router is running IOS 12.2(5) )?
2-Is it possible to use this router ( 26xx series) as a gatekeeper and an ip gateway ( for my Internet traffic and traffic destined to a different network) at the same time ? if yes what are the vulnerabilities my system will be exposed to? and if no , why?
please reply at this email: [email protected]
Regards,
Jacob.

Hi,
Here is the answer to your questions:
1. Yes, you can use the 26xx as a gatekeeper. Just make sure you are using the IP/H323 feature set (c2600-ix-mz) image for the gatekeeper feature.
2. Yes, you can do this. But you will need to use the enterprise feature/MCM
feature set (2600-jsx-mz). Also, you should use the 12.2T release
for this feature.
Thanks,
Chinh

Ipv6 on 800 series

I have a question how can you configure ipv6 on a 800 series?

Install a version of IOS and featureset that support the IPv6 features you need. Reboot. Then configure those features.

800 series with wireless repeater supports?

Hi,
Can anyone confirm if any of the 800 series routers support wireless station-mode repeater?
The software configuration guide suggests it is possible but I've been unable to find a definitive answer.
Thanks.
Sent from Cisco Technical Support iPhone App

Please Check the following:
http://www.cisco.com/en/US/docs/routers/access/1800/wireless/configuration/guide/s37rf.html#wp1101651
Please make sure to rate correct answer

Does rcapi on 800 series routers support CAPI version 2.0?

Does rcapi on 800 series routers support CAPI version 2.0? In that case: Is a certain IOS release mandantory?
Best Regards,
Martin Funke
K&K networks

Does rcapi on 800 series routers support CAPI version 2.0? In that case: Is a certain IOS release mandantory?
Best Regards,
Martin Funke
K&K networks

Winpe nic driver for elitenook 800 series

I'm having problems getting the mic driver for the new 800 series (840 & 850) laptops from HP.
I downloaded the pe drivers from the HP website (as well as the win7 ones and some direct from Intel) but even though these get added to the boot.wim files the driver doesn't seem to load and when booted into pe we end up with no network access.
I've tried loading the driver manually through the command prompt when in pe and still don't get anywhere. I've seen posts on the 2012 boards and people seem to have had success, but I think they are able to use the win8 drivers which 2207 won't let
you import......
Any ideas that anyone has will be appreciated!
Matt

Hi guys. I hope this helps you. This is the file you need for the Lenovo M72e. I have successfully deployed this with ConfigMgr 2012 RTM
Gerry Hampson | Blog:
www.gerryhampsoncm.blogspot.ie | LinkedIn:
Gerry Hampson | Twitter:
@gerryhampson

Need Help in Finding out IDS, Firewall, Router, Switch series for Datacenter

Hii All,
Greetings!!!
Iam workin on project for Datacenter. I need ur help in finding me out the exact Router, Switch, Firewall & IDS series based on my attached complete technical specification.
pls find attched tech info for router, switch, firewall & IDS. Ur early response will be appreciated.
Thanku in advance 4 ur kind cooperation & help.
Looking forward 4 ur prompt response.
Brgds
Arif..

For the router/switch I would suggest to evaluate the 6500.
For firewall the ASA5540, 5550 and 5580.
For IDS 42.40, 42.55 and higher.
I hope it helps.
PK

GRE on router 800 serie

Similar Messages

Maybe you are looking for