3640 router/VPNS does anyone have knowledge on setting up??

[gman10]

Hello all,


I've set up 2500 and 1900 series routers (fully configed) but this new project I am about to embark on involves a 3640 router.. Actually one will be local in NY and the other at a remote location (St. Croix Island).. My main concern is setting up the VPN access at both sides.. This may be simpler than i think but I've never worked on a 3640 router.. Can anyone provide any tips or typical configs concerning the 3640?? I'd really appreciate it, I don't think I'll have the privilege of going to St. Croix.. anything I will configure will be sent to the remote technician via email where he/she will cut and paste the config into the device's startup-config..

Thanks
GREG

 

[cryptomap]

There is very little difference between a 3640 and a 2500. Where there is a difference of course will be in the version of the IOS you are running. If you want to use VPN then you need the IPSEC 3DES Feature set. There is loads of information on the Cisco website regarding setting up IPSEC. If you want me to post a sample config let me know.

 

[gman10]

Thank you, yes please post a sample.. I 'd very much appreciate that! I will look it over -especially the VPN parts.. Thanks again, I'll be waiting for the config..

Enjoy the weekend-
GREG

 

[cryptomap]

Router A

crypto isakmp policy 1
encr 3des
authentication pre-share
crypto isakmp key secret address 10.128.1.2
!
!
crypto ipsec transform-set 3640A esp-3des esp-sha-hmac
!
crypto map 3640A 10 ipsec-isakmp
set peer 10.128.1.2
set transform-set 3640A
match address encryptaclA

interface Serial1/1
description Router A
ip address 10.128.1.1 255.255.255.252
crypto map 3640A

ip access-list extended encryptaclA
deny eigrp any any
permit ip any any

Router B

crypto isakmp policy 1
encr 3des
authentication pre-share
crypto isakmp key secret address 10.128.1.1
!
!
crypto ipsec transform-set 3640B esp-3des esp-sha-hmac
!
crypto map 3640B 10 ipsec-isakmp
set peer 10.128.1.1
set transform-set 3640B
match address encryptaclB

interface Serial1/1
description Router B
ip address 10.128.1.1 255.255.255.252
crypto map 3640B

ip access-list extended encryptaclB
deny eigrp any any
permit ip any any

Please note that it is not usually good practice to encrypt everything. Please replace the access list & IP addresses with your own requirements.

Hope this helps.

"There are only 10 types of people in the world - those who understand binary, and those who don't"