LAB4: IPSec VPN – homework
LAB4: IPSec VPN – homework
Homework
Our small company RedGears Ltd.
described in LAB 1 has grown
bigger and a new marketing (MAR)
department has moved to a new
location. Sales people need to
communicate with engineering
(ENG) department and headquaters
(HQ) in a secure manner.
Deploy new router R4 and secure
internal communication.
LAB4: IPSec VPN – homework
Homework: setup
use LAB 1 setup
add a new line card NM-1FE-TX to R3 router (Conﬁgure → Slots)
new line from the Internet (R3) to marketing department:
Line Network
L3 192.168.0.12/30
LAB4: IPSec VPN – homework
Homework: report
Deadline: 28th of March, 2016
Your report must contain:
conﬁguration of all 4 routers: R1, R2, R3, R4 (show conﬁguration)
copy&paste the output of
show running-config
execute following commands on each router and include it in report:
show crypto isakmp sa detail
show crypto ipsec sa
show crypto ipsec profile
show crypto ipsec transform-set
small packet captures (PCAP format) of at least 10 pings between
P1 and P2, P1 and P3, P2 and P3
LAB4: IPSec VPN – homework
References
Cisco IOS Security Conﬁguration Guide, Release 12.4,
http://www.cisco.com/c/en/us/td/docs/ios/security/configuration/
guide/12_4/sec_12_4_book.html
LAB4: IPSec VPN – homework