I've got a site-to-site VPN that was previously between a Cisco 1841 and a Cisco PIX 515. The PIX dropped dead yesterday, and I had to swap in a cheap Netgear firewall to restore basic internet access. I'm hoping to re-establish this tunnel before my replacement Cisco shows up, but the Netgear isn't making it easy.
Let's say the Cisco end is 18.104.22.168 and the Netgear end is 22.214.171.124.
Here's the relevant config from the Cisco end:
crypto isakmp policy 11 encr 3des authentication pre-share group 2 crypto isakmp key redactedKey address 126.96.36.199 ! ! crypto ipsec transform-set sharks esp-des esp-md5-hmac ! crypto map nolan 11 ipsec-isakmp set peer 188.8.131.52 set transform-set sharks match address 120
IKE settings entered in Netgear Local Local identity type: WAN IP Address Local identity data: 184.108.40.206
Remote Remote identntiy type: Remote WAN IP Remote identity data: [grayed out]
IKE SA Params encryption algo: 3DES Auth algo: SHA-1 Auth method: PSK: redactedKey DH group: group 2 SA Life time: 28800
VPN policy configuration Remote address: 220.127.116.11 Local IP: any Remote IP: range: 192.168.1.1-192.168.1.254 (LAN IP range of remote) But then there are fields to enter AH and ESP configuration- settings that don't appear to be in the Cisco config. I leave these all blank.
But, when I attempt to apply these settings the NG spits out this unhelpful error: ERROR : AH or ESP condition not support
I don't have any reference to AH or ESP encryption keys in my Cisco config, so I'm not sure what to fill in here.