Configuring a Client to Site IPSec VPN Tunnel on a Cisco ISR Router

In this video I show how to configure a client to site ipsec tunnel on a Cisco ISR router, which is a little bit different compared to site to site tunnel configuration. This is actually something that I decided to do for production for the purpose of having a secondary backup VPN if for any reason the SSL VPN server were to become unavailable. With that being said, I thought that it would make a good tutorial for anyone looking to learn!
Sample Configuration: www.rmtechcent...
Did you find this content helpful? Let us know - www.rmtechcent...
Website: www.rmtechcent...
Contact: www.rmtechcent...

[@Gruntos]

Well, thanks to this vid I have Cisco IPSec working on my Cisco 1941. A lot of the content is site-site and this one hits the nail on the head. To the point with clear instructions and the best thing of all its explained rather than captions. This means I can look at my console with out having to stop.
Great Content. Thank you

[@voanhcuocvolam1803]

Thank you for the tutorial, just what I needed

[@dcrump]

Interesting… just set up 2 ASR 1001x … both sides identical but having authentication issues while crypto tunnel is active but I can still ssh into client site. I noticed you had AAA group .. could you elaborate? I

[@RMTechCentral]

I do have AAA groups configured; they are referenced in the crypto map for authentication and authorization. You mentioned that you just set up 2 ASR 1001x routers... it seems like you might be trying to configure a site-to-site VPN instead of client-to-site, which this video outlines. If you are looking to get a site-to-site VPN working, let me know and I'm sure I can point you in the right direction. Thanks for your question!

[@cmespy2005]

Great Job

[@RMTechCentral]

Thank you!

[@ChaoMridu]

Hi sir...please reply...if possible... I cannot find this command in the Cisco 1121-4p router.. crypto map NAME isakmp Authorization list groupauth .. what's the alternative?

[@ChaoMridu]

Found this command ' crypto map NAME client Authorization list groupauth ' not sure if this is the alternative

[@ChaoMridu]

Found this crypto map NAME client Authorization list groupauth not sure if this is the alternative

[@xaviveral]

same problem with a c1111-8p

[@maziardamavandi4159]

why this configuration doesn't work on android cellphones??? shall I do configure something plus???

[@DEnishiZ]

How can you connect to a VPN with this configuration using Windows 11?

[@kirilgenov2279]

Hi, I'm also interested if we can connect with this configuration with the Windows built-in VPN client? Did you manage to get it working?

[@mykheymutua]

Where is the lab?