ASA8.42 nat-t IPSEC VPN test

1. Test topology:

2. Configuration:

A.R1:

! Interface Configuration

Interface Loopback0

IP Address 1.1.1.1 255.255.255.0

Interface fastethernet0/0

IP address 10.1.1.1 255.255.255.0

No shut

! Routing Configuration

IP Route 0.0.0.0 0.0.0.0 10.1.1.10

B.site1 Firewall:

! Interface Configuration

Interface GigabitEthernet0

Nameif Inside

Security-level 100

IP address 10.1.1.10 255.255.255.0

No shut

Interface GigabitEthernet1

Nameif Outside

Security-level 0

IP address 202.100.1.1 255.255.255.0

No shut

! Routing Configuration

Route Outside 0.0.0.0 0.0.0.0 202.100.1.10 1

Route Inside 1.1.1.0 255.255.255.0 10.1.1.1 1

! IKEV1 First Stage configuration

Crypto Ikev1 Enable Outside

Crypto IKEV1 Policy 10

Authentication Pre-share

Encryption des

Hash MD5

Group 2

Tunnel-group 202.100.1.10 Type ipsec-l2l

Tunnel-group 202.100.1.10 Ipsec-attributes

IKEV1 Pre-shared-key Cisco

! IKEV1 Second Stage configuration

Crypto IPSec Ikev1 transform-set transet esp-des Esp-md5-hmac

! Thanks for interest stream and Cryto map configuration

Access-list VPN Extended permit IP 1.1.1.0 255.255.255.0 2.2.2.0 255.255.255.0

Crypto map Crymap match address VPN

Crypto map Crymap set peer 202.100.1.10

Crypto map Crymap set IKEV1 transform-set transet

Crypto Map Crymap Interface Outside