How to encrypt Pre-Shared Keys in Your Cisco VPN

I guess you have already noticed that the VPN pre-shared keys stay in plain text even after applying password encryption. Below you can find a short explanation on how to encrypt it and keep it all safe: This is the VPN config before encryption: ****************************************************************** crypto isakmp policy 1 encr 3des authentication pre-share group 2 … Continue reading →

MVPN Frequently Asked Questions

Q. Is the Cisco Multicast Virtual Private Networks (MVPN) solution dependant on Multiprotocol Label Switching (MPLS)? A. No, Cisco’s MVPN solution operates independently from MPLS. The Service provider (SP) does not need to use MPLS for MVPNs. Q. Is MVPN a recognized standard? A. MVPNs were outlined in draft-rosen-vpn-mcast-04.txt. Cisco’s implementation is based upon the Multicast domain solution. Q. Can a … Continue reading →

Dynamic Multipoint VPN example

Ever wonder how to provision several hundreds of VPNs from remote offices with dynamic IP to a central site with minimal configuration? Cisco offer an elegant solution called Dynamic Multipoint VPN. With DMVPN the central site does not need to know the remote site IP in advance, it will learn it via NHRP protocol when … Continue reading →

Set up VPN in Windows 7

(Outgoing) Step 1 Click the Start button. In the search bar, type VPN and then select Set up a virtual private network (VPN) connection. Step 2 Enter the IP address or domain name of the server to which you want to connect. If you’re connecting to a work network, your IT administrator can provide the best address. Step 3 If you want to … Continue reading →

OpenNHRP

OpenNHRP implements NBMA Next Hop Resolution Protocol (as defined in RFC 2332). It makes it possible to create dynamic multipoint VPN Linux router using NHRP, GRE and IPsec. It aims to be Cisco DMVPN compatible. Download

IP-VPN Lite

IP VPN-Lite is a product from Nortel (now acquired by Avaya) that provides the ability to run IP Virtual private networks using Multiprotocol BGP (MP-BGP) extensions (based on RFC 4364) across a normal IP backbone infrastructure. Unlike Multiprotocol Label Switching (MPLS) based VPNs, IP VPN-Lite is purely based on an end-to-end IP transport. While still … Continue reading →

Dynamic Multipoint VPN (DMVPN)

Dynamic Multipoint VPN (DMVPN) is a Cisco IOS Software solution for building scalable IPsec Virtual Private Networks (VPNs). Cisco DMVPN uses a centralized architecture to provide easier implementation and management for deployments that require granular access controls for diverse user communities, including mobile workers, telecommuters, and extranet users. Cisco DMVPN allows branch locations to communicate … Continue reading →

L2TP VPN using xl2tpd

L2TP (Layer 2 Tunneling Protocol) is a tunneling protocol used for VPNs. It uses the UDP port 1701 to communicate. It doesn’t have any encryption, but we can encrypt the L2TP packets by using it with IPSec. For theoretical information on L2TP you can visit its Wiki. In Linux, you can find so many different applications … Continue reading →

Troubleshooting IPSec VPNs

Special guests Wen Zhang (Cisco TAC) and returning guest Jay Young Taylor (Cisco TAC) discuss the methodologies and approaches to troubleshooting IPSec VPN problems. The team discusses the best way to use show commands, debug output, and troubleshooting tools to get your VPN tunnels up and passing traffic! Podcast Notes Useful commands: Show commands show … Continue reading →