SGLAB-C881K9#
SGLAB-C881K9#
SGLAB-C881K9#sh run
Building configuration...

Current configuration : 2043 bytes
!
! Last configuration change at 11:09:09 UTC Fri Nov 16 2018
version 15.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname SGLAB-C881K9
!
boot-start-marker
boot-end-marker
!
aqm-register-fnf
!
enable secret 5 $1$bEYB$z5Jz9F7gED/aMzosGxRe01
enable password <Masked>
!
no aaa new-model
!
!
!
!
!
!


!
!
!
!
no ip cef
no ipv6 cef
!
!
!
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
license udi pid C881-K9 sn FGL2101208A
!
!
username ssn privilege 15 secret 5 $1$2N/d$gqvkb2e6IZLUCEE5oVhG20
!
!
!
!
!
!
!
crypto isakmp policy 1
 encr aes
 authentication pre-share
 lifetime 3600
crypto isakmp key 4B0u7WnF6vFGSdy2QARJ0U09SaK1CvCW address 10.110.249.1
!
!
crypto ipsec transform-set bridge11f7d8 esp-3des esp-sha-hmac
 mode tunnel
!
!
!
crypto map TST local-address Loopback0
crypto map TST 10 ipsec-isakmp
 set peer 10.110.249.1
 set transform-set bridge11f7d8
 match address bridge11f7d8_ACL
!
!
!
!
!
!
interface Loopback0
 ip address 10.50.50.10 255.255.255.255
!
interface FastEthernet0
 no ip address
 shutdown
!
interface FastEthernet1
 no ip address
 shutdown
!
interface FastEthernet2
 no ip address
 shutdown
!
interface FastEthernet3
 no ip address
!
interface FastEthernet4
 ip address 192.168.2.1 255.255.255.0
 duplex full
 speed auto
 crypto map TST
!
interface Vlan1
 ip address 192.168.1.1 255.255.255.0
!
router rip
 network 10.0.0.0
 network 192.168.2.0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
ip access-list extended bridge11f7d8_ACL
 permit icmp 192.168.1.0 0.0.0.255 10.110.193.0 0.0.0.3
 permit tcp 192.168.1.0 0.0.0.255 10.110.193.0 0.0.0.3 eq 20000
!
!
!
control-plane
!
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
line con 0
 no modem enable
line aux 0
line vty 0 4
 password <Masked>
 login
 transport input all
!
scheduler allocate 20000 1000
!
end

SGLAB-C881K9# sh crypto ipsec sa

interface: FastEthernet4
    Crypto map tag: TST, local addr 10.50.50.10

   protected vrf: (none)
   local  ident (addr/mask/prot/port): (192.168.1.0/255.255.255.0/6/0)
   remote ident (addr/mask/prot/port): (10.110.193.0/255.255.255.252/6/20000)
   current_peer 10.110.249.1 port 500
     PERMIT, flags={origin_is_acl,}
    #pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0
    #pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0
    #pkts compressed: 0, #pkts decompressed: 0
    #pkts not compressed: 0, #pkts compr. failed: 0
    #pkts not decompressed: 0, #pkts decompress failed: 0
    #send errors 0, #recv errors 0

     local crypto endpt.: 10.50.50.10, remote crypto endpt.: 10.110.249.1
     plaintext mtu 1500, path mtu 1500, ip mtu 1500, ip mtu idb FastEthernet4
     current outbound spi: 0x0(0)
     PFS (Y/N): N, DH group: none

     inbound esp sas:

     inbound ah sas:

     inbound pcp sas:

     outbound esp sas:

     outbound ah sas:

     outbound pcp sas:

   protected vrf: (none)
   local  ident (addr/mask/prot/port): (192.168.1.0/255.255.255.0/1/0)
   remote ident (addr/mask/prot/port): (10.110.193.0/255.255.255.252/1/0)
   current_peer 10.110.249.1 port 500
     PERMIT, flags={origin_is_acl,}
    #pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0
    #pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0
    #pkts compressed: 0, #pkts decompressed: 0
    #pkts not compressed: 0, #pkts compr. failed: 0
    #pkts not decompressed: 0, #pkts decompress failed: 0
    #send errors 12, #recv errors 0

     local crypto endpt.: 10.50.50.10, remote crypto endpt.: 10.110.249.1
     plaintext mtu 1500, path mtu 1500, ip mtu 1500, ip mtu idb FastEthernet4
     current outbound spi: 0x0(0)
     PFS (Y/N): N, DH group: none

     inbound esp sas:

     inbound ah sas:

     inbound pcp sas:

     outbound esp sas:

     outbound ah sas:

     outbound pcp sas:
SGLAB-C881K9#