I can't seem to get the VPN connection going with my 877. I have an old IOS (12.4) but it looks to me like all the pieces are there. I have compared this config against the Azure-provided (albeit v15) script and it seems close enough with the exception of a few default values.
Some relevant config info:
- local LAN: 10.10.26.0/24
- virtual LAN: 10.10.27.0/24
- local G/W: A.B.C.54
- remote G/W: D.E.F.155
- PSK: 00000000000000000000000
relevant IOS config:
! interface for our ISP interface Vlan4 description ISP Link ip address A.B.C.54 255.255.255.252 ip nbar protocol-discovery ip flow ingress ip flow egress ip nat outside ip virtual-reassembly zone-member security out-zone crypto map azure-crypto-map ! ip access-list extended azure-vpn-acl permit ip 10.10.26.0 0.0.0.255 10.10.27.0 0.0.0.255 ! crypto isakmp policy 1 encr aes 256 authentication pre-share group 2 crypto isakmp key 00000000000000000000000 address E.D.F.155 no-xauth ! crypto ipsec transform-set azure-ipsec-proposal-set esp-aes 256 esp-sha-hmac ! crypto map azure-crypto-map 1 ipsec-isakmp set peer D.E.F.155 set security-association lifetime kilobytes 102400000 set transform-set azure-ipsec-proposal-set match address azure-vpn-acl
I can provide access-list entries if that helps
Can anyone spot anything in there that isn't right? Does anyone have any experience getting the 877 working with Azure site-to-site vpn?