==Lab 2-2
===============================HQ
!
crypto isakmp policy 10
authentication pre-share
hash sha
encr aes 128
group 14
lifetime 3600
exit
!
crypto isakmp key cisco address 198.51.100.1
!
crypto ipsec transform-set MYSET esp-aes 128 esp-sha-hmac
exit
!
crypto ipsec profile MYPROFILE
set transform-set MYSET
exit
!
interface tunnel 0
ip unnumbered gigabitethernet0/1
tunnel source gigabitethernet0/1
tunnel destination 198.51.100.1
!
tunnel mode ipsec ipv4
tunnel protection ipsec profile MYPROFILE
exit
!
ip route 10.10.10.0 255.255.255.0 tunnel 0
!
==Lab 2-3
===============================HQ
!
crypto isakmp policy 10
authentication pre-share
hash sha384
encr aes 256
group 14
exit
!
no crypto isakmp key cisco address 198.51.100.1
!
crypto isakmp key ccnpsecDMVPN address 203.0.113.1
crypto isakmp key ccnpsecDMVPN address 198.51.100.1
!
crypto ipsec transform-set MYSET esp-aes esp-sha-hmac
mode transport
exit
crypto ipsec profile MYIPSECPROFILE
set transform-set MYSET
exit
!
interface tunnel 1
tunnel mode gre multipoint
tunnel source gigabitethernet0/1
tunnel key 12345
ip nhrp network-id 1
ip nhrp authentication NHRP
ip nhrp map multicast dynamic
tunnel protection ipsec profile MYIPSECPROFILE
ip address 10.1.1.1 255.255.255.0
ip mtu 1400
ip tcp adjust-mss 1360
ip ospf network point-to-multipoint
exit
!
no interface tunnel0
!
router ospf 1
network 10.1.1.0 0.0.0.255 area 0
exit
!
========Task5
!
interface tunnel 1
ip ospf network broadcast
exit
!

=================================BRANCH
!
crypto isakmp policy 10
authentication pre-share
hash sha384
encr aes 256
group 14
exit
!
crypto isakmp key ccnpsecDMVPN address 192.0.2.3
!
!
crypto ipsec transform-set MYSET esp-aes esp-sha-hmac
mode transport
exit
crypto ipsec profile MYIPSECPROFILE
set transform-set MYSET
exit
!
!
interface tunnel 1
tunnel mode gre multipoint
tunnel source gigabitethernet0/1
tunnel key 12345
ip nhrp network-id 1
ip nhrp authentication NHRP
ip nhrp nhs 10.1.1.1
ip nhrp map multicast 192.0.2.3
ip nhrp map 10.1.1.1 192.0.2.3
tunnel protection ipsec profile MYIPSECPROFILE
ip address 10.1.1.2 255.255.255.0
ip mtu 1400
ip tcp adjust-mss 1360
ip ospf network point-to-multipoint
exit
!
interface gigabitethernet0/1
no crypto map VPN-to-ASA
!
!
router ospf 1
network 10.1.1.0 0.0.0.255 area 0
exit
!
========Task5
crypto isakmp key ccnpsecDMVPN address 198.51.100.1
!
!
!
interface tunnel 1
ip ospf network broadcast
ip ospf priority 0
exit
!
==================================PARTNER
!
crypto isakmp policy 10
authentication pre-share
hash sha384
encr aes 256
group 14
exit
!
no crypto isakmp key cisco address 192.0.2.3
!
crypto isakmp key ccnpsecDMVPN address 192.0.2.3
!
crypto ipsec transform-set MYSET esp-aes esp-sha-hmac
mode transport
exit
crypto ipsec profile MYIPSECPROFILE
set transform-set MYSET
exit
!
!
interface tunnel 1
tunnel mode gre multipoint
tunnel source gigabitethernet0/1
tunnel key 12345
ip nhrp network-id 1
ip nhrp authentication NHRP
ip nhrp nhs 10.1.1.1
ip nhrp map multicast 192.0.2.3
ip nhrp map 10.1.1.1 192.0.2.3
tunnel protection ipsec profile MYIPSECPROFILE
ip address 10.1.1.3 255.255.255.0
ip mtu 1400
ip tcp adjust-mss 1360
ip ospf network point-to-multipoint
exit
!
no interface tunnel 0
!
!
router ospf 1
network 10.1.1.0 0.0.0.255 area 0
network 10.10.10.0 0.0.0.255 area 2
exit
!
========Task5
!
crypto isakmp key ccnpsecDMVPN address 203.0.113.1
!
!
interface tunnel 1
ip ospf network broadcast
ip ospf priority 0
exit
!