Site-to-site IPSec VPN Configuration Example (pt-ipsec.pkt), using Packet Tracer Version 5.2

Packet Tracer Version 5.2 Site-to-site IPSec VPN Configuration Example (pt-ipsec.pkt)




Summary of configuration steps is in below.

1. Define Transform Sets.
!

crypto ipsec transform-set MOSTSECURE esp-aes 256 esp-sha-hmac
!

2. Define IPSec Crypto Map

!
access-list 100 permit ip 10.1.1.0 0.0.0.255 10.2.2.0 0.0.0.255
!
crypto map PT-IPSEC 1000 ipsec-isakmp 
 description Packet Tracer IPSEC Test Crypto Map
 set peer 172.16.2.1
 set pfs group5
 set security-association lifetime seconds 120
 set transform-set MOSTSECURE 
 match address 100
!

3. Define ISAKMP policy to protect previous IPSec Security Association

!
crypto isakmp policy 100
 encr aes 256
 authentication pre-share
 group 5
 lifetime 60
!

4. Define Authentication Key. In this simple example, I just use simple "Pre-Shared Key" authentication.

!
crypto isakmp key samekey address 172.16.2.1
!

5. Attach IPSec Crypto Map to outgoing interface.

!
interface Serial0/0/0
 ip address 172.16.1.1 255.255.255.252
 crypto map PT-IPSEC
!