Z1 VPN Configurations

Mohisla2
New here

Z1 VPN Configurations

Hi Team,

 

 I'm trying to build a VPN IPSEC Tunnel between Z1 & Cisco CSV100 Router..

 

i have added the configurations on Cisco CSV1000 router  but i don't know how to configure it from Z1 side..

 

could you please help me with a sample configuration on Z1 ..

 

Below are the configuration from the router side:

 

crypto keyring internet-keyring211 vrf internet-vrf
pre-shared-key address 196.202.21.211 key cisco123
!
!
!
!
!
crypto isakmp policy 211
encr 3des
authentication pre-share
group 2

crypto isakmp profile cust1-ike-prof211
vrf Islam
keyring internet-keyring211
match identity address 196.202.21.211 255.255.255.255 internet-vrf
isakmp authorization list default
!
!
crypto ipsec transform-set esp-3des-sha esp-3des esp-sha-hmac
mode tunnel
!
!
!
crypto map mymap211 10 ipsec-isakmp
set peer 196.202.21.211
set transform-set esp-3des-sha
set isakmp-profile cust1-ike-prof
match address 188


access-list 188 permit ip host 172.9.0.2 host 192.168.128.5

 

 

1 REPLY 1
PhilipDAth
Kind of a big deal

First put a tag on your ZI.  Go to:

Secureity Appliance/Appliance Status

Click on the pencil next to "tags" and give the Z1 a tag.,

 

Go to:

Security Appliance/Site to Site VPN

Scroll down to:

Organization-wide settings

Click on:

Add a peer

 

Give it a name.  Put in the public IP address of the CSR1000V.  For the private subnet put in 172.9.0.2/32.  Note that you will need to change the destination encryption domain of your CSR1000V to include the entire subnet behind the Z1.    Under availability choose the tag of your Z1 that you created above.  Fill in your pre-shared key.  Leave the "IPSec Policies" on the default setting.

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels