Clueless - VPN

[mrn]

I've been asked to setup a new connection on an existing VPN at a company I'm currently working at. They have just sold off the side of the business with the techincal know-how.

If we are
1.1.1.1/8 int interface
2.2.2.2/28 ext interface

and I want to allow company x with an address of 3.3.3.3 to access one of our servers 192.168.0.1 with a password of letmein how would I do this?

Using Cisco IOS C831

If I've missed any important info, please let me know

Mike

"A foolproof method for sculpting an elephant: first, get a huge block of marble, then you chip away everything that doesn't look like an elephant.

 

[Nazgulero]

Hello,

you could try a dynamic access list, not sure if that is a viable solution for your needs, since the remote user would have to TELNET in to your router first in order to then be able to access the server.
Anyway, here is how you would configure it:

interface Ethernet1
ip access-group 100 in
!
access-list 100 permit tcp host 3.3.3.3 host 2.2.2.2 eq telnet
access-list 100 dynamic server permit ip host 3.3.3.3 host 192.168.0.1
!
line vty 0 2
password letmein
autocommand access-enable host timeout 5
line vty 3 4
login (local)
rotary 1

The VTY line configuration is needed so that only the first 3 lines can be used by your remote customer, while the other two remain for your own access.

Can you try and see if this works ?

Regards,

GP

 

[lambent]

do you want to configure a site-to-site VPN or client-to-site VPN?

 

[mrn]

Site to Site

Mike

"A foolproof method for sculpting an elephant: first, get a huge block of marble, then you chip away everything that doesn't look like an elephant.

 

[lambent]

Read this

"GRE over IPSec with EIGRP to Route Through a Hub and Multiple Remote Sites Configuration Example"

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a008009438e.shtml

 

[mrn]

Thanks that really useful...But and there is always a but, I don't control the other VPN, can I use ipsec & isakmp?

Mike

"A foolproof method for sculpting an elephant: first, get a huge block of marble, then you chip away everything that doesn't look like an elephant.

 

[lambent]

In that sample configuration it's using IPSec and ISAKMP plus GRE tunnel.