Site to another with RVS4000 and 2621

Hey people. I had originally a vpn site-to site between my pix 515e and RVS4000, but I wanted to put my router on the edge of my network for greater control of the quality of Service. I have managed to set up the tunnel, but can not pass all traffic to the tunnel. The RVS4000 said the tunnel is mounted, and when I do a "isakmp crypto to show his" on the 2621, I see a QM_IDLE which I think it's good.

My architecture is:

LAN - RVS4000 (public static ip) - internet - 2621 (public dynamic IP (dhcp ()) - LAN

Here's a copy of my config 2621. My guess is I left something, but can't put my finger on. Any help is appreciated. Thank you!

version 12.3

horodateurs service debug datetime msec

Log service timestamps datetime msec

encryption password service

!

hostname core_router

!

boot-start-marker

boot-end-marker

!

!

No aaa new-model

IP subnet zero

IP cef

!

!

IP domain name craig.net

8.8.8.8 IP name-server

IP-server names 8.8.4.4

!

IP multicast routing

Max-events of po verification IP 100

!

!

!

!

voip phone service

Fax transmission protocol g711ulaw

H323

SIP

!

!

!

!

!

!

!

!

!

password username privilege 15 7 XXXXXXXXXXX craigrobertlee

--More--                           !

!

property intellectual ssh time 60

property intellectual ssh source interface FastEthernet0/1

property intellectual ssh craigkey name of the rsa key pair

!

class-map correspondence-everything VOIP_TRAFFIC

game group-access 101

!

!

Policy-map VOIP_POLICY

class VOIP_TRAFFIC

bandwidth 1000

class class by default

Fair/fair-queue

!

!

!

crypto ISAKMP policy 10

BA 3des

md5 hash

preshared authentication

Group 2

ISAKMP crypto key XXXXXXXX address 174.79.X.X no.-xauth

ISAKMP crypto keepalive 2800

!

!

Crypto ipsec transform-set esp-3des esp-md5-hmac SET1

!

Crypto map ROGERS 10-isakmp ipsec

set of peer 174.79.X.X

set the 60 security association idle time

game of transformation-SET1

match address 102

!

!

!

!

Null0 interface

no ip unreachable

!

interface FastEthernet0/0

DHCP IP address

NAT outside IP

Speed 100

full-duplex

card crypto ROGERS

out of service-policy VOIP_POLICY

!

interface FastEthernet0/1

the IP 192.168.0.1 255.255.255.252

IP nat inside

automatic duplex

automatic speed

!

interface Dialer1

no ip address

No cdp enable

!

overload of IP nat inside source list 100 interface FastEthernet0/0

no ip address of the http server

no ip http secure server

IP classless

IP route 192.168.1.0 255.255.255.0 192.168.0.2

IP route 192.168.2.0 255.255.255.0 192.168.0.2

IP route 192.168.3.0 255.255.255.0 192.168.0.2

!

!

access-list 10 permit 192.168.1.254

access-list 11 allow 192.168.1.10

access-list 12 allow 192.168.0.0 0.0.255.255

Note access-list 12 SSH_ACL

access-list 100 permit ip 192.168.0.0 0.0.255.255 everything

Access-list 100 Craig_Home_IP_Network note

access-list 101 permit udp any eq 5060 any eq 5060

Note access-list 101 VOIP_ACL

access-list 102 permit ip 192.168.0.0 0.0.3.255 192.168.15.0 0.0.0.255

Note access-list 102 ROGERS_IP_NETWORK

access-list 110 deny ip 192.168.0.0 0.0.3.255 192.168.15.0 0.0.0.255

access-list 110 permit ip 192.168.0.0 0.0.3.255 all

not run cdp

!

sheep allowed 10 route map

corresponds to the IP 110

!

craighome1 RO 11 SNMP-server community

location of Server SNMP Gear closet

Server enable SNMP traps snmp authentication linkdown, linkup warmstart cold start

Enable SNMP-Server intercepts ATS

Server enable SNMP traps xgcp

Server enable SNMP traps ISDN call-information

Server enable SNMP traps ISDN layer2

-More - Server enable snmp traps ISDN chan-not-available

Server enable SNMP traps ISDN ietf

Server enable SNMP traps hsrp

config SNMP-server enable traps

entity of traps activate SNMP Server

Server enable SNMP traps config-copy

Server enable SNMP traps envmon

Server enable SNMP traps bgp

Server enable SNMP traps pim neighbor-rp-mapping-change invalid-pim-message of change

Server enable SNMP traps ipmulticast

Server enable SNMP traps msdp

SNMP Server enable rsvp traps

SNMP traps-frame relay enable server

Server enable SNMP traps subif frame relay

Server enable SNMP traps rtr

Server enable SNMP traps syslog

SNMP enable traps stun Server

Server enable SNMP traps dlsw

Server enable SNMP traps bstun

SNMP-Server enable traps dial

Server enable SNMP traps dsp registered card

Server enable SNMP traps atm subif

-More - Server enable snmp traps pppoe

Server enable SNMP traps ipmobile

SNMP-Server enable traps isakmp policy add

Server enable SNMP traps isakmp policy delete

Server enable SNMP traps isakmp tunnel beginning

Server enable SNMP traps isakmp tunnel stop

SNMP server activate ipsec cryptomap add traps

SNMP server activate ipsec cryptomap remove traps

SNMP server activate ipsec cryptomap attach traps

SNMP server activate ipsec cryptomap detach traps

Server SNMP traps enable ipsec tunnel beginning

SNMP-Server enable traps stop ipsec tunnel

Enable SNMP-server holds too many associations of ipsec security

traps to enable SNMP-server voice poor-qov

Enable SNMP-Server intercepts dnis

SNMP-server host 192.168.1.10 version 2 c craighome1

!

!

!

!

!

Line con 0

local connection

-More - line to 0

line vty 0 4

access-class 12

exec-timeout 0 0

local connection

entry ssh transport

line vty 5 15

access-class 12

exec-timeout 0 0

local connection

entry ssh transport

!

NTP-period clock 17180394

Server NTP 192.43.244.18

!

end

Hi Robert,.

You use the ACL 100 to NAT when you use ACL 110 or route card sheep, it seems that you wanted to work around NAT, but I forgot to apply it.

That's what you have:

overload of IP nat inside source list 100 interface FastEthernet0/0

That's what you should get instead:

overload of IP nat inside source list 110 interface FastEthernet0/0

or

IP nat inside source map route sheep interface FastEthernet0/0 overload

Have fun

Raga

Tags: Cisco Security

Similar Questions

  • Looking for adobe certified companies that can create a web site of muse with java and PHP for me

    Looking for adobe certified companies that can create a web site of muse with java and PHP for me

    Relationship problems he...

    1: nothing like the Adobe Certified companies

    2: sites of Muse do no PHP support.

  • Just downloaded latest version of Firefox, but each site brings no reliable error using Firefox, but same sites are ok with IE and Chrome

    I have Windows 7 family on a laptop. I just downloaded the latest version of Firefox (v25) and Google as default search engine. Any site I enter in Google, I get the message 'Not reliable' site. I typed in BBC, Firefox etc. The message is:

    This connection is Untrusted

    You asked Firefox to connect safely on www.google.com, but we cannot confirm that your connection is secure.

    My virus checker is Norton.

    I read that the support forum and my date and time are correct. I have IE and Chrome with Google like search engine by default and is not the message when you access the BBC, Firefox etc.

    This is the first time that Firefox has been downloaded to the laptop.

    Please someone has an idea what is causing the problem.

    I had installed BrowserSafe. As soon as I uninstalled Firefox worked properly.

    Thank you very much for the advice.

  • Is my client using the web browser editor can change the position of text and images, the site was built with muse

    Is my client using the web browser editor can change the position of text and images, the site was built with muse and at first, tell him that he could change the text and images, but he can't change the location of contents of Th.

    Now he wants to paste and copy directly from the web browser Publisher Word and wants to change all of the place itself.

    Does someone have an answer or another solution?

    Philippe

    First of all, to answer your question about moving content. No, that is not supported.

    Then, never advised him to stick to Word what for the web. Word adds a lot of very strange code that can break your page completely. Tell him if he has a Word to add to the site to paste into Notepad or any other text editor, copy and paste to Muse.

  • Problem with youtube and other video sites

    I have a problem with youtube and other video sites:

    Everything is up-to-date (flash, FF, my plug ins.) but I get crashes when loading the video. I can hear the sound but I see only the first frame of the video.

    I've reinstalled flash/firefox or tried updating them again for about 4 times now and my cookies/cache has also been errased which i usually don't do. If i enter FF's safe mode it also freezes.
    

    I hope someone can help, I looked for answers on google before and I tried everything I saw, but it did not help.

    GRTS,
    agrash

    I had the same problem, I uninstalled the plugin Flash player (Adobe Flash Player 11.0.1 152) and the problem is solved. I installed the plug-in again and the problem came back. So right now I have no flas Player liked-in, but I don't have too much problem. I hope that I will not find another problem, but it seems that everything is OK.

  • It began to appear in the first inch of each merchant site I visit with the new version, "Congratulations!" Every $5 spent at JCPenney saves you a chance to win a $500 gift card. I have run scans and nothing appears not infected, but I do not understand t

    It began to appear in the first inch of each merchant site I visit with the new version, "Congratulations!" Every $5 spent at JCPenney saves you a chance to win a $500 gift card. I have run scans and nothing appears not infected, but I don't get that annoying block in Internet Explorer. I uninstalled and reinstalled firefox and when I did, the first thing is present at his inauguration was a message that says: "you have joined the shop now...". "something or another and I had to click OK, it was a microsoft OK message. How can I get rid of this?

    URL of affected sites

    http://www.BestBuy.com, target.com, any site of retail trade

    Your problem can be caused by Malware. You can run and update according to free anti-virus software:

    1. Malwarebytes (free version) - http://www.malwarebytes.org

    2. Spybot Search & Destroy - http://www.safer-networking.org

    3. Spyware Terminator - http://www.spywareterminator.com

    In addition, there are a number of forums, you can use to help get rid you of your infection. It is:

  • Windows media player does not automatically open a video file on a Web site but I save it and open the file with Windows media player to play the video or audio recording.

    Windows media player does not automatically open a video file on a Web site but I save it and open the file with Windows media player to play the video or audio recording. I used to be able to play any video or audio file in any site!

    Hello

    Try resetting the default associations for WMP and IE.

    How to set default Associations for a program under Vista
    http://www.Vistax64.com/tutorials/83196-default-programs-program-default-associations.html
    How to associate a file Type of Extension to a program under Vista
    http://www.Vistax64.com/tutorials/69758-default-programs.html

    If necessary:

    How Unassociate a Type of Extension file in Vista - and a utility to help
    http://www.Vistax64.com/tutorials/91920-unassociate-file-extention-type.html
    Restore the Type Associations by default Vista file extensions
    http://www.Vistax64.com/tutorials/233243-default-file-type-associations-restore.html
    How to view and change an Extension of filename on Vista
    http://www.Vistax64.com/tutorials/103171-file-name-extension.html

    ====================================

    Also follow these steps:

    Follow these steps to remove corruption and missing/damaged file system repair or replacement.

    Run DiskCleanup - start - all programs - Accessories - System Tools - Disk Cleanup

    Start - type in the search box - find command top - RIGHT CLICK – RUN AS ADMIN

    sfc/scannow

    How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program
    generates in Windows Vista cbs.log
    http://support.Microsoft.com/kb/928228

    Then, run checkdisk - schedule it to run at next boot, then apply OK your way out, then restart.

    How to run the check disk at startup in Vista
    http://www.Vistax64.com/tutorials/67612-check-disk-Chkdsk.html

    ------------------------------------------------------------

    Then, if necessary:

    Have you recently installed another player?

    Reset your associations for WMP and IE.

    How to set default Associations for a program under Vista
    http://www.Vistax64.com/tutorials/83196-default-programs-program-default-associations.html
    How to associate a file Type of Extension to a program under Vista
    http://www.Vistax64.com/tutorials/69758-default-programs.html

    ---------------------------------------------

    Do this to reregister the Jscript.dll and Vbscript.dll files.

    Start - type in the search box - find command top - RIGHT CLICK – RUN AS ADMIN

    type or copy and paste-> regsvr32 jscript.dll
    Press enter

    type or copy and paste-> regsvr32 vbscript.dll
    Press enter

    Restart and if all goes well, it will run now.

    --------------------------------------------------------------

    Have you recently added stores or ANY application from Stardock?

    Using 64-bit Vista?

    Can you think of recent things you did in WMP which could be the cause? You added another
    reader recently or an add-on for WMP?

    When I try to use Windows Media Player 11, the program does not start, or some UI elements
    are empty - a Mr Fixit
    http://support.Microsoft.com/kb/925704/en-us

    Maybe something here
    http://msmvps.com/blogs/chrisl/articles/17315.aspx
    and here
    http://msmvps.com/blogs/chrisl/Archive/2004/10/30/17399.aspx

    Check here the news of WMP11
    http://zachd.com/PSS/PSS.html

    I hope this helps.

    I hope this helps.

    Rob - bicycle - Mark Twain said it is good.

  • problem with Ezvpn and VPN from Site to Site

    Hello

    I want to set Ezvpn and VPN Site to another but the problem is that the EasyVpn that would only work at the Site to the Site does not at all

    I have set up 1 card for two VPN with different tagged crypto

    I had execlude the traffice to NOT be natted to, and when I remove the Ezvpn site to another work well

    crypto ISAKMP policy 100
    BA aes
    md5 hash
    preshared authentication
    Group 2
    !
    crypto ISAKMP policy 10000
    BA aes 256
    preshared authentication
    Group 5
    key address 123456 crypto isakmp (deleted)

    ISAKMP crypto client configuration group easyvpn
    easyvpn key
    domain ezvpn
    pool easyvpn
    ACL easyvpn
    Save-password
    Split-dns cme
    MAX User 9
    netmask 255.255.255.0
    !

    Crypto ipsec transform-set esp - aes 256 esp-sha-hmac vpn

    Crypto-map dynamic easyvpn 10
    Set transform-set dmvpn
    market arriere-route
    !
    !
    address-card crypto easyvpn local Dialer1
    card crypto client easyvpn of authentication list easyvpn
    card crypto isakmp authorization list easyvpn easyvpn
    client configuration address card crypto easyvpn answer
    easyvpn 100 card crypto ipsec-isakmp dynamic easyvpn
    easyvpn 1000 ipsec-isakmp crypto map
    defined by the peers (deleted)
    Set transform-set vpn
    game site address

    interface Dialer1
    the negotiated IP address
    IP mtu 1492
    NAT outside IP
    IP virtual-reassembly
    encapsulation ppp
    Dialer pool 1
    PPP authentication chap callin pap
    PPP chap hostname
    PPP chap password
    PPP pap sent-name to user
    easyVPN card crypto

    DSL_ACCESSLIST extended IP access list
    deny ip 100.0.0.0 0.0.0.255 101.1.1.0 0.0.0.255
    deny ip 100.0.0.0 0.0.0.255 70.0.0.0 0.0.0.255
    IP 100.0.0.0 allow 0.0.0.255 any
    refuse an entire ip
    easyvpn extended IP access list
    IP 100.0.0.0 allow 0.0.0.255 70.0.0.0 0.0.0.255
    IP extended site access list
    IP 100.0.0.0 allow 0.0.0.255 101.1.1.0 0.0.0.255

    Best regards

    The sequence number of card crypto for the static mapping crypto (site to site vpn) should be higher (ie: sequence number must be lower) than the ezvpn (map dynamic crypto).

    In your case, you must configure as follows:

    map easyvpn 10 ipsec-isakmp crypto
    defined by the peers (deleted)
    Set transform-set vpn
    game site address

    map easyvpn 150 - ipsec-isakmp crypto dynamic easyvpn

    Hope that solves this problem.

  • Strange sensitive problem with downloading of site in a subdomain - Tablet and phone look bad

    I need help!  I transferred my site with the desktop versions, Tablet and phone.  I had this problem before when downloading a Muse of the site in a specific subdomain (under another domain host and web).  I tested several times in Muse and all three versions are perfect.  But if you take a look at the version Mobile and tablet, you will see what I mean.  The site is located off the coast to the left on both and is not proportioned correctly.  Is it because it's under a subdomain.  As I mentioned I had happen before downloading a site to a specific subdomain.  What would be a problem?  I really love to help with this.

    Here's the URL:

    sturgillsimpson.com

    The office is very well so if someone could look at the other it would be great.

    Thank you!

    BRITISH COLUMBIA

    This url does not work, you can publish the site as a place to test BC and then provide us the url.

    Thank you

    Sanjit

  • Try to add a page to a pages document. It worked until now but just finished page 13 with text and photos and cannot add another page, using macbook pro with El Capitan and the most recent version of the Pages.

    Try to add a page to a pages document. It worked until now but just finished page 13 with text and photos and cannot add another page, using macbook pro with El Capitan and the most recent version of the Pages.

    You have placed your beam to insert at the end of your text on page 13 and then apply Insert menu: Page Break? In the v5.6.2, Pages I just add a new page to a section of four pages to this approach.

  • problem with Safari and the opening of sites

    problem with Safari and the opening of sites

    Please describe the problem in more detail?

    Try to reset the settings of Safari:

    1. open Safari

    2. click on the Safari menu at the top (to the right of the Apple logo)

    3. Select the Preferences/Privacy tab

    4. click on remove all data from the Web site

    5. close Safari.

    Remove cache Safari files:

    1. click on finder

    2. look for the menu GO to top

    3. click on GO and hold down the option key. This will show a user library folder.

    4. click library and find the Caches folder

    5. in the folder caches com.apple.Safari Ouvrezledossier

    6. move the Cache.db file Trash.

    This should solve the problem. If it does not help, try to disable the Safari extensions

    1. open Safari

    2. click on the Safari menu at the top (to the right of the Apple logo)

    3. Select Preferences

    4. find the Extensions tab

    5 disable all extensions of

    6. relaunch Safari

  • Have Windows 7 running on Parallels Desktop with a Mac. Get "setup.exe is not a valid Win32 application" when trying to download a program with Windows Explorer. I can download from these sites with Vista and XP with other computers.

    Have Windows 7 running on Parallels Desktop with a Mac. Get "setup.exe is not a valid Win32 application" when trying to download a program with Windows Explorer. I can download from these sites with Vista and XP with other computers. Now, I can't download the programs that are supposed to solve the problem! including FoxFire

    Try to download from this site:

  • Using Firefox 4 and Windows 7. Whenever I have to start Firefox from a shortcut to a Web site, what happens with the following error "there was a problem sending the command to the program". The requested site is loaded after that. without any problem.

    Using Firefox 4 and Windows 7. Whenever I have to start Firefox from a shortcut to a Web site, what happens with the following error "there was a problem sending the command to the program". The requested site is loaded after that. without any problem.

    If a shortcut is used while Firefox is already open the error will not occur.

    For me, the problem was the FoxClock extension. Once I disabled it, the problem was gone.

    Hope this helps.

    Olivier

  • Safari on my MacBook Pro retina 9.0.3 15-inch Version 10.11.3 do not show images on some Internet sites. They appear for a fraction of a second then disappear with a question mark in the Center. The same sites work fine on Chrome and Firefox.

    Safari on my MacBook Pro retina 9.0.3 15-inch Version 10.11.3 do not show images on some Internet sites. They appear for a fraction of a second then disappear with a question mark in the Center. The same sites work fine on Chrome and Firefox.

    I suggest you only begin by taking the measures recommended in this support article.

  • Automatic updates program turned out impossible to turn it on, with error message "site has encountered a problem and cannot display the page you are trying to view.

    Original title: Auto updates

    My automatic updates program is disabled.  When I try to turn it on, I get this message "the site has encountered a problem and cannot display the page you are trying to view.  Automatic updates forever, why was off and why he now won't come back?

    Bill T

    E-mail address is removed from the privacy *.

    Hi Bill,

    This problem can be caused if the automatic updates service may be missing in the Services snap-in.

    1. is the Service Pack 3 installed on your computer?

    2. what anti-virus software you use in your computer?

    Follow the steps below:

    Method 1:

    To resolve this issue, follow these steps:

    1. Click Start, click run, type explore, and then click OK.
    2. Look for the following folder:

    %windir%\System32\inf

    Note The %windir%\System32 placeholder represents the path of the WINDOWS System folder. Typically, C:\WINDOWS is the path of the WINDOWS System folder.

    The inf folder is a hidden folder. To view the inf folder, follow these steps:

    a. on the Tools menu, click on Folder Optionsand then click the view tab.

    b. in the list of Advanced settings , click to display the hidden files and folders under hidden files and folders.

    c. click applyand then click OK.

    3. double-click on the inf folder, right-click in theand then click install.

    4. click on Browse. Look for, and then click the \ServicePackFiles\i386 %windir%\System32folder if the following conditions are met:

    • You install Windows XP SP3 from a CD Windows XP SP3 which included as part of the basic installation of SP3.
    • You have downloaded and installed Windows XP SP3 from the Microsoft Web site.
    • Windows XP SP3 was included with the computer.

    Note If the files from the Service Pack folder is not present on the computer, you can copy the files from a Windows XP SP3 slipstreamed installation CD.

    5. click OK to copy the files.

    6. change the setting on the computer to not display the hidden files and folders. To do this, follow these steps:

    1. On the Tools menu, click Folder Options, and then click the view tab.
    2. In the list of Advanced settings , click show not the hidden files and folders under hidden files and folders.
    3. Click applyand then click OK.

    7 restart the computer and check.

    Method 2:

    Follow the steps in the link below.

    You receive an error message "Windows Update has encountered an error and cannot display the requested page" when you try to install an update:

    http://support.Microsoft.com/kb/883614

    For reference:

    How to configure and use automatic updates in Windows:

    http://support.Microsoft.com/kb/306525

     

    If you need further assistance on this topic, let know us and we will be happy to help you.

Maybe you are looking for