how we can creat VPN..??? how it can be configured on cisco
switches..??? can we creat VPN on different networks..???
why we need to create VPN..??? kindly write complete
activity of commands to configure a VPN on switch..??? me
specially looking towards Jatendra and Shahin



how we can creat VPN..??? how it can be configured on cisco switches..??? can we creat VPN on diffe..

Answer / jitu

ok i am going to expalin at first how we cretae vpn on cisco
router first then it will be easy for understand to you on
l3 switches and l2 switches

ok let start

VPN=that is virtual private network it is set on the
workstaion or workdoamin such that any autrized person can
acess his network from out side network
this vpn can be configured by two process

1 pptp that is point to point tunlinh protoccol Microsoft
Point-to-Point Encryption Protocol (MPPE).


network diagram

pc-----internet-----router--------workstaions

pc=with pptp
internet ip=172.16.142.191
routere ethernet=10.130.13.13

now start

2621#configure termina
#vpdn enable
#vpdn-group 1
2621(config-vpdn)#accept-dialin
2621(config-vpdn-acc-in)#protocol pptp

2621(config-vpdn-acc-in)#virtual-template 1
2621(config-vpdn-acc-in)#exit

2621(config)#ip local pool test 192.168.1.1 192.168.1.250

2621(config)#interface virtual-template 1

2621(config-if)#encapsulation ppp
2621(config-if)#peer default ip address pool test
2621(config-if)#ip unnumbered FastEthernet0/0
2621(config-if)#no keepalive
2621(config-if)#ppp encrypt mppe auto
2621(config-if)#ppp authentication pap chap ms-chap





Cisco 2621 Router

2621#show run
Building configuration...

Current configuration : 1566 bytes
!
version 12.2
service timestamps debug datetime msec localtime
service timestamps log datetime msec localtime
no service password-encryption
!
hostname 2621
!
boot system flash
logging queue-limit 100
enable secret 5 $1$dGFC$VA28yOWzxlCKyj1dq8SkE/
!
ip subnet-zero
ip cef
!
!
no ip domain lookup
ip domain name cisco.com
!
vpdn enable

!--- Enable VDPN.

!
vpdn-group 1

!--- Default PPTP VPDN group.

accept-dialin
protocol pptp
virtual-template 1
!
!
!
!
!
!
!
!
!
!
voice call carrier capacity active
!
!
!
!
!
!
!
no voice hpi capture buffer
no voice hpi capture destination
!
!
mta receive maximum-recipients 0
!
!
controller T1 0/0
framing sf
linecode ami
!
controller T1 0/1
framing sf
linecode ami
!
!
!
interface Loopback0
ip address 10.100.100.1 255.255.255.0
ip nat inside
!
interface FastEthernet0/0
ip address 172.16.142.191 255.255.255.0
no ip route-cache
no ip mroute-cache
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 10.130.13.13 255.255.0.0
duplex auto
speed auto
!

!--- Create virtual-template interface used for cloning
!--- virtual-access interfaces with the use of address pool test
!--- with CHAP authentication, PAP, and MS-CHAP.

interface Virtual-Template1
ip unnumbered FastEthernet0/0
peer default ip address pool test
no keepalive
ppp encrypt mppe auto
ppp authentication pap chap ms-chap
!

!--- Create IP pool named test and specify IP range.

ip local pool test 192.168.1.1 192.168.1.250
no ip http server
no ip http secure-server
ip classless
ip route 0.0.0.0 0.0.0.0 172.16.142.1
!
ip pim bidir-enable
!
!
!
call rsvp-sync
!
!
mgcp profile default
!
dial-peer cor custom
!
!
!
!
!
line con 0
exec-timeout 0 0
line aux 0
line vty 0 4
password *************
login
!
!
end



this is the confrgation
expalnation of each steps i will give letter
this is my confrgation so some output is omited

Is This Answer Correct ?    6 Yes 0 No

Post New Answer

More CCNA Interview Questions

Hi Everyone, i am CCNA certified, i am searching jobs related to ccna. Although i don't have experience in networking field, i found very difficult to search job(posted my resume in all job portals). I am very much interested to work in networking field, please guide me, my mail id: nagesha12adig@gmail.com; Please let me know any company taking ccna freshers(Preferably Bangalore location). Thanks guys...

1 Answers  


How many ways are there to implement VPN architecture?

0 Answers   CCIE,


Which is true regarding half duplex Ethernet operation? A.) Half Duplex ethernet technology provides a transmit circuit connection wired directly to the receiver circuit at the other end B.) Half duplex transmission between stations is achieved by using point to multipoint Ethernet and Fast Ethernet C.) With Half Duplex transmission logically circuits feed into a single cable creating a situation similar to a one way bridge D.) Half Duplex transmission between stations is achieved using Point to Point Ethernet & Fast Ethernet

1 Answers  


Which type of switching is considered to be 'wire speed?' A.) Cut-Through B.) Multiplexed C.) Inverted D.) Layer 4 E.) Store and Forward F.) Layer 3

2 Answers  


Which of the following are Session Layer standards? A.) ASCII and EBCDIC B.) MPEG and MIDI C.) NFS and SQL D.) JPEG and PICT

2 Answers  






How many collision domains are in switch?

0 Answers  


What is BGP attribute & How many types of attributes are used by BGP???

5 Answers   Hathway, HCL, Infinite Computer Solutions,


What is etherchannel?

0 Answers  


You just entered the following command_Router(config#) line console 0 Which operation is most likely to follow? A. Confound terminal type B. enter protocol parameters for a serial line C. create a password on the console terminal line D. establish a terminal type 4 connection to a remote host E. change from configuration mode to console privileged mode

10 Answers   Intel, Quark, Wipro,


Mention what are the ranges for the private ips?

0 Answers  


Identify the keystroke used to terminate the setup mode? A.) Ctrl-K B.) Crtl-C C.) Ctrl-Z D.) Crtl-End

2 Answers  


Which statement about the flow control function of TCP is true? A. TCP makes no snarl to check for lost or duplicate data packets B. The application layer must sequence data packets when using TCP C. TCP controls the flow of UDP data through negative acknowledgements (NAK) D. TCP is a connection-oriented protocol that acknowledges receipt of data packets and is considered reliable

1 Answers  


Categories