{"id":2505,"date":"2024-05-15T22:25:00","date_gmt":"2024-05-15T21:25:00","guid":{"rendered":"https:\/\/www.balajibandi.com\/?p=2505"},"modified":"2025-03-30T20:37:46","modified_gmt":"2025-03-30T19:37:46","slug":"ccie-sec-v6-lan-to-lan-ipsec-tunnel","status":"publish","type":"post","link":"https:\/\/www.balajibandi.com\/?p=2505","title":{"rendered":"CCIE SEC v6 LAN-to-LAN IPsec Tunnel"},"content":{"rendered":"\n

LAN-to-LAN IPsec Tunnel Between HQ and branch Office<\/p>\n\n\n\n

Below example topology HQ and Branch.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Configuration :<\/p>\n\n\n\n

HQ Router<\/td>Branch Router<\/td><\/tr>
interface Ethernet0\/0
ip address 192.168.30.1 255.255.255.0
duplex auto
!
interface Ethernet0\/2
ip address 20.20.20.2 255.255.255.252
duplex auto
crypto map mymap
!
crypto isakmp policy 10
encr aes
hash sha256
authentication pre-share
group 14
crypto isakmp key Cisco123 address 10.10.10.2
!
crypto map mymap 10 ipsec-isakmp
set peer 10.10.10.2
match address 101
!
!
ip route 0.0.0.0 0.0.0.0 20.20.20.1
!
!
access-list 101 permit ip 192.168.30.0 0.0.0.255 192.168.20.0 0.0.0.255<\/td>		interface Ethernet0\/0
ip address 192.168.20.1 255.255.255.0
duplex auto
!
interface Ethernet0\/1
ip address 10.10.10.2 255.255.255.252
duplex auto
crypto map mymap
!
crypto isakmp policy 10
encr aes
hash sha256
authentication pre-share
group 14
crypto isakmp key Cisco123 address 20.20.20.2
!
crypto map mymap 10 ipsec-isakmp
set peer 20.20.20.2
match address 101
!
ip route 0.0.0.0 0.0.0.0 10.10.10.1
!
!
access-list 101 permit ip 192.168.20.0 0.0.0.255 192.168.30.0 0.0.0.255
<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

Testings<\/p>\n\n\n\n

Initiate the ping from HQ to Branch :<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Validation from HQ Router<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Validation from Branch Router<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

happy Labbbinggggggggggggggggggggggg! <\/p>\n","protected":false},"excerpt":{"rendered":"

LAN-to-LAN IPsec Tunnel Between HQ and branch Office Below example topology HQ and Branch. Configuration : HQ Router Branch Router interface Ethernet0\/0ip address 192.168.30.1 255.255.255.0duplex auto!interface Ethernet0\/2ip address 20.20.20.2 255.255.255.252duplex autocrypto map mymap!crypto isakmp policy 10encr aeshash sha256authentication pre-sharegroup 14crypto isakmp key Cisco123 address 10.10.10.2!crypto map mymap 10 ipsec-isakmpset peer 10.10.10.2match address 101!!ip route 0.0.0.0 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,2],"tags":[],"class_list":["post-2505","post","type-post","status-publish","format-standard","hentry","category-ccie-sec","category-cisco"],"_links":{"self":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts\/2505","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2505"}],"version-history":[{"count":1,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts\/2505\/revisions"}],"predecessor-version":[{"id":2514,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts\/2505\/revisions\/2514"}],"wp:attachment":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2505"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2505"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2505"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}