I can't seem to get the VPN connection going with my 877. I have an old IOS (12.4) but it looks to me like all the pieces are there. I have compared this config against the Azure-provided (albeit v15) script and it seems close enough with the exception of a few default values.
Some relevant config info:
- local LAN: 10.10.26.0/24
- virtual LAN: 10.10.27.0/24
- local G/W: A.B.C.54
- remote G/W: D.E.F.155
- PSK: 00000000000000000000000
relevant IOS config:
! interface for our ISP
interface Vlan4
description ISP Link
ip address A.B.C.54 255.255.255.252
ip nbar protocol-discovery
ip flow ingress
ip flow egress
ip nat outside
ip virtual-reassembly
zone-member security out-zone
crypto map azure-crypto-map
!
ip access-list extended azure-vpn-acl
permit ip 10.10.26.0 0.0.0.255 10.10.27.0 0.0.0.255
!
crypto isakmp policy 1
encr aes 256
authentication pre-share
group 2
crypto isakmp key 00000000000000000000000 address E.D.F.155 no-xauth
!
crypto ipsec transform-set azure-ipsec-proposal-set esp-aes 256 esp-sha-hmac
!
crypto map azure-crypto-map 1 ipsec-isakmp
set peer D.E.F.155
set security-association lifetime kilobytes 102400000
set transform-set azure-ipsec-proposal-set
match address azure-vpn-acl
I can provide access-list entries if that helps
Can anyone spot anything in there that isn't right? Does anyone have any experience getting the 877 working with Azure site-to-site vpn?