Dude if you can't figure these kind of questions then may be you need to study more. Like Jay said , cheating is not going to take you anywhere.
On Saturday, August 25, 2012, Jay McMickle wrote: > Please do not post questions like this to this forum. Cheating will get > you banned. > > Regards, > Jay McMickle- CCIE #35355 (RS), 3x CCNP (RS,Security,Design) > Sent from my iPhone > > On Aug 25, 2012, at 4:48 PM, Krishna Nagam <[email protected]<javascript:;>> > wrote: > > > Hi guy > > > > i am doing site-to-site vpn configuration configuration between Routers > > > > R1 and R5 both are sited in behind the ASA on ASA enable the nat-control > protocal > > > > but my tunnel is not establishing > > > > R5 > > > > crypto isakmp policy 10 > > encr 3des > > authentication pre-share > > group 2 > > crypto isakmp key Cisco123 address 49.49.6.1 > > > > crypto ipsec transform-set vpn esp-3des esp-md5-hmac > > ! > > crypto ipsec profile vpn > > set transform-set vpn > > > > interface Tunnel0 > > ip address 123.1.1.5 255.255.255.0 > > tunnel source FastEthernet0/0 > > tunnel destination 49.49.6.1 > > tunnel mode ipsec ipv4 > > tunnel protection ipsec profile vpn > > > > interface FastEthernet0/0 > > ip address 49.49.7.5 255.255.255.0 > > duplex auto > > speed auto > > > > R1 > > > > crypto isakmp policy 10 > > encr 3des > > authentication pre-share > > group 2 > > crypto isakmp key Cisco123 address 49.49.7.5 > > > > crypto ipsec transform-set vpn esp-3des esp-md5-hmac > > ! > > crypto ipsec profile vpn > > set transform-set vpn > > > > interface Tunnel0 > > ip address 123.1.1.1 255.255.255.0 > > tunnel source FastEthernet0/0 > > tunnel destination 49.49.7.5 > > tunnel mode ipsec ipv4 > > tunnel protection ipsec profile vpn > > > > interface FastEthernet0/0 > > ip address 49.49.6.1 255.255.255.0 > > duplex auto > > speed auto > > > > > > ASA > > > > interface Ethernet0/0 > > nameif outside > > security-level 0 > > ip address 49.49.6.10 255.255.255.0 > > ! > > interface Ethernet0/1 > > nameif inside > > security-level 100 > > ip address 49.49.7.10 255.255.255.0 > > > > > > access-list outside extended permit esp host 49.49.6.1 host 49.49.7.5 > > access-list outside extended permit udp host 49.49.6.1 host 49.49.7.5 eq > isakmp > > nat-control > > > > > > > > > > > > _______________________________________________ > > For more information regarding industry leading CCIE Lab training, > please visit www.ipexpert.com > > > > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com > -- FNK, CCIE Security#35578
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
