Corporate Headquarters

Comprehensive Configuration Examples
no ip directed-broadcast
no keepalive
full-duplex
no cdp enable
!
interface Serial1/0
ip address 172.24.2.5 255.255.255.0
no ip directed-broadcast
no ip mroute-cache
no keepalive
fair-queue 64 256 0
framing c-bit
cablelength 10
dsu bandwidth 44210
clock source internal
no cdp enable
crypto map s1first
!
ip route 10.1.3.0 255.255.255.0 Tunnel1
ip route 10.1.6.0 255.255.255.0 Tunnel1
!
access-list 101 permit gre host 172.24.2.5 host 172.17.2.4
!
line con 0
transport input none
line aux 0
line vty 0 4
login
!
end

---

3-43
Cisco IOS VPN Configuration Guide
OL-8336-01
Chapter 3 Site-to-Site and Extranet VPN Business Scenarios
Comprehensive Configuration Examples
Extranet Scenario
The following sample configuration is based on the physical elements shown in 
Figure 3-9
:
Figure 3-9
Extranet VPN Scenario Physical Elements
Headquarters Router Configuration
hq-sanjose# 
show running-config
Building configuration...
Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname hq-sanjose
!
boot system flash bootflash:
boot bootldr bootflash:c7200-jk9o3s-mz.123-3
boot config slot0:hq-sanjose-cfg-small
no logging buffered
!
crypto isakmp policy 1
authentication pre-share
lifetime 84600
crypto isakmp key test12345 address 172.24.2.5
PC A
Fast Ethernet
0/0
10.1.3.3/24
Fast Ethernet
0/1
10.1.6.4/24
Fast Ethernet
0/0
10.1.5.2/24
Headquarters gateway
(hq-sanjose)
Remote office gateway
(ro-rtp)
Business partner gateway
(bus-ptnr)
Internet
Internet
Serial 2/0
172.16.2.2/24
Serial 1/0
172.23.2.7/24
Public
Web server
10.1.6.5/24
Private
corporate
server
10.1.3.6/24
PC B
10.1.5.3/24
GRE tunnel
IPSec tunnel
24218

---