Cisco PIX med 2 tunler
Hej med jer !!Jeg har et problem med en PIX
Kun den ene af tunlerne virker- den med lavest prioritet ??? why og hvordan får jeg begge til at virke ??
:
:VPN Config
:
:
:access lists
:
access-list DKNET permit ip 192.168.10.0 255.255.255.0 192.168.20.0 255.255.255.0
access-list DKNET permit ip 192.168.10.0 255.255.255.0 192.168.30.0 255.255.255.0
:
nat 0 access-list DKNET
:
:
:
:Phase 1
:3DES, sha, pre share, DH group 1, Lifetime 1 day
:
isakmp enable outside
:
isakmp key testtest address 1.2.3.4
isakmp key testtest address 2.3.4.5
isakmp policy 52 authentication pre-share
isakmp policy 52 encryption 3des
isakmp policy 52 hash sha
isakmp policy 52 group 1
isakmp policy 52 lifetime 86400
:
:
:
:Phase 2
:
crypto ipsec transform-set DKTRANS esp-3des
:
:Tunnel to Randers
crypto map DKMAP 49 ipsec-isakmp
crypto map DKMAP 49 match address DKNET
crypto map DKMAP 49 set peer 1.2.3.4
crypto map DKMAP 49 set transform-set DKTRANS
:
:
:Tunnel to Herning
crypto map DKMAP 50 ipsec-isakmp
crypto map DKMAP 50 match address DKNET
crypto map DKMAP 50 set peer 2.3.4.5
crypto map DKMAP 50 set transform-set DKTRANS
:
:
crypto map DKMAP interface outside
:
:
sysopt connection permit-ipsec
:
:end of config
:
