Cisco Site

!IKE Phase 1

crypto isakmp policy 10
 encr aes 256
 authentication pre-share
 group 5
 exit

!ACL

ip access-list extended vpn-cisco-sophos-net
 permit ip 10.20.30.0 0.0.0.255 10.20.0.0  0.0.255.255
 exit

!PSK zum VPN-GW ordnen

crypto isakmp key 0 sehr-geheim address 192.168.244.130

!IKE Phase 2

crypto ipsec  transform-set AES-256-SHA esp-aes 256 esp-sha-hmac
exit

!Zusammenfassen von Phase 1 und Phase 2

crypto map cisco-sophos  10 ipsec-isakmp 
 set peer 192.168.244.13
 set transform-set AES-256-SHA
 match address vpn-cisco-sophos-net
 exit

!Anwenden der Crypto Map auf die Schnittstelle

interface fastEthernet 0/0

Sophos site