TERMINATING VPN ON ASA


R1:

interface FastEthernet0/0

  ip address 1.1.1.1 255.255.255.0

ip route 10.2.2.2 255.255.255.255 1.1.1.10


R2:

interface FastEthernet0/0

  ip address 2.2.2.2 255.255.255.0

interface Loopback0

  ip address 10.2.2.2 255.255.255.255

ip route 1.1.1.0 255.255.255.0 2.2.2.10

crypto isakmp policy 1

  encr 3des

  hash md5

  authentication pre-share

  group 2

  lifetime 3600

crypto isakmp key cisco address 2.2.2.10

access-list 111 permit ip host 10.2.2.2 host 1.1.1.1

crypto ipsec transform-set TSET esp-des esp-sha-hmac

crypto map CRYMAP 1 ipsec-isakmp

  set peer 2.2.2.10

  set transform-set TSET

  match address 111

interface FastEthernet0/0

  crypto map CRYMAP


ASA1:

interface Ethernet0/0

  nameif outside

  security-level 0

  ip address 2.2.2.10 255.255.255.0

interface Ethernet0/1

  nameif inside

  security-level 100

  ip address 1.1.1.10 255.255.255.0

route outside 10.2.2.2 255.255.255.255 2.2.2.2

crypto isakmp policy 5

  authentication pre-share

  encryption 3des

  hash md5

  group 2

  lifetime 3600

tunnel-group 2.2.2.2 type ipsec-l2l

tunnel-group 2.2.2.2 ipsec-attributes

  pre-shared-key cisco

access-list 101 extended permit ip host 1.1.1.1 host 10.2.2.2

crypto ipsec transform-set TSET esp-des esp-sha-hmac

crypto map CMAP 5 match address 101

crypto map CMAP 5 set peer 2.2.2.2

crypto map CMAP 5 set transform-set TSET

crypto map CMAP interface outside

crypto isakmp enable outside