Cli vpn

medic

Hi. I've been lurking in the forum for a while. It helped me through the CCNA a few years ago so this was the first place I came to start working on CCNA:S.

I plan on testing at the end of the month so I am in my final cram phase now. The only thing that is hanging me up is CLI Site-to-Site VPN configuration. I can look at a config and totally understand what each line does but to write it from scratch is killing me. Anyone have any tips other than constant repetition, which I will return to when I finish posting this?

JSK

I used the PDF file at this link : http://www.techexams.net/forums/ccna-security/56368-ike-config-nuggetlab-com.html#post432635

medic

Thanks. I am using the CBT Nuggets and went looking for that pdf at nuggetlab.com but it says no files available.

In the pdf, I notice he includes step 3:

Configure ISAKMP Identity: Router(config)#crypto isakmp identity <address/hostname>

I don't see the crypto isakmp identity command mentioned in the Exam Guide. Is it needed?

chrisone

perhaps you need to master the phases and steps in the tunnel creation process. I feel this is why you cant start from scratch because you can't write out step for step how this process starts. Once you master this , you can easily write it down and tell yourself , ok i need a policy, i need yada yada yada, now i need an ACL for interesting traffic for this step, etc. etc.

peanutnoggin

chrisone wrote: »

perhaps you need to master the phases and steps in the tunnel creation process. I feel this is why you cant start from scratch because you can't write out step for step how this process starts. Once you master this , you can easily write it down and tell yourself , ok i need a policy, i need yada yada yada, now i need an ACL for interesting traffic for this step, etc. etc.

+1... As Chris said, if you know the tunnel creation process and understand what happens at each Phase, the CLI part is pretty straight forward. I would drill that information in my head if I were you... Good luck!

-Peanut

medic

Thanks for the replies.

I have the theory down, it's just the command line syntax that seems to be my hang up. I just it just comes down to repetition. Back to the lab!!!

My goal is to test (and pass!) on Oct 26th.

ConstantlyLearning

medic wrote: »

Thanks. I am using the CBT Nuggets and went looking for that pdf at nuggetlab.com but it says no files available.

In the pdf, I notice he includes step 3:

Configure ISAKMP Identity: Router(config)#crypto isakmp identity <address/hostname>

I don't see the crypto isakmp identity command mentioned in the Exam Guide. Is it needed?

I believe the address is used by default so the command isn't required.

ConstantlyLearning

The exam topics specify using SDM by the way so I wouldn't get too hung up on the CLI config.

medic

Holy crap you are right! I could have sworn I read configure site-to-site VPN using CLI and SDM.

Well, still good to know anyway.