no idea if you need this on the simulator, but on older platforms it was mandatory to "crypto isakmp enable"
thanks, Enno On Mon, Aug 10, 2009 at 10:20:57PM +0300, Mohammad Khalil wrote: > > hi > i configured the below on GNS3 simulator > > Router(config)#crypto isakmp policy 1 > > Router(config-isakmp)#authentication pre-share > Router(config)#crypto isakmp key VPNKEY address x.x.x.x > > Router(config)#access-list extended LIST > > Router(config-list)#permit ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255 > > Router(config)#crypto ipsec transform-set SET > > Router(config)#crypto map MAP 10 ipsec-isakmp > > Router(config-crypto-map)#set peer x.x.x.x > > Router(config-crypto-map)#set transform-set SET > > Router(config-crypto-map)#match address LIST > > Router(config)#interface f0/0 > > Router(config-if)#crypto map MAP > > and im trying to ping 192.168.2.1 source 192.168.1.1 (loopbacks) but im not > able to , and the show crypto isakmp sa produces empty o/p > > am i missing something here ?? > > > > > _________________________________________________________________ > Drag n? drop?Get easy photo sharing with Windows Live? Photos. > > http://www.microsoft.com/windows/windowslive/products/photos.aspx > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ -- Enno Rey ERNW GmbH - Breslauer Str. 28 - 69124 Heidelberg - www.ernw.de Tel. +49 6221 480390 - Fax 6221 419008 - Cell +49 173 6745902 PGP FP 055F B3F3 FE9D 71DD C0D5 444E C611 033E 3296 1CC1 Handelsregister Mannheim: HRB 337135 Geschaeftsfuehrer: Enno Rey _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
