Hello Shake--
There is no problem having several tunnels on the same interface,
however, they must be in the same crypto map. Here is an example:
crypto map L2L-map 1 ipsec-isakmp
description RMS test
set peer 11.22.33.44
set security-association lifetime seconds 86400
set transform-set ESP-AES-256-MD5
match address RMS
crypto map L2L-map 2 ipsec-isakmp
description Chicago DC
set peer 66.77.88.99
set security-association lifetime seconds 86400
set transform-set ESP-AES-256-MD5
match address Chicago
crypto map L2L-map 3 ipsec-isakmp
description Regina HQ
set peer 66.44.55.22
set security-association lifetime seconds 86400
set transform-set ESP-AES-256-MD5
match address Regina-HQ
...
interface GigabitEthernet0/0
description Internet - Outside
ip address 33.44.55.66 255.255.255.0
ip access-group autosec_firewall_acl in
no ip redirects
no ip unreachables
no ip proxy-arp
ip inspect autosec_inspect out
ip policy route-map VPN-PBR-map
duplex full
speed 100
no cdp enable
no mop enabled
crypto map L2L-map
Could you post a sanitized copy of your configuration?
cjw
Date: Thu, 16 Dec 2010 13:55:00 +0300
> From: Righa Shake <[email protected]>
> To: [email protected]
> Subject: [c-nsp] Cisco IPSEC Configuration
> Message-ID:
>
> <[email protected]<1awiokko3zkxg%[email protected]>
> >
> Content-Type: text/plain; charset=ISO-8859-1
>
> Am having several ipsec configurations on the same interface on a router
>
> however when i run the command
> show crypto session detail command am only seeing a single session and not
> the other session am trying to bring up.
>
> what could b the problem
>
>
> Rgrds,
> Shake
>
>
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
