Hi DS,
In addition to the crypto map command you entered (which is correct), you probably have a configuration similar to the following on the ASA: tunnel-group 1.1.1.1 type ipsec-l2l tunnel-group 1.1.1.1 general-attributes default-group-policy lan-to-lan tunnel-group 1.1.1.1 ipsec-attributes pre-shared-key ***** You need to put in similar configurations for 2.2.2.2. Thanks, Adam From: Bunny Singh [mailto:[email protected]] Sent: Wednesday, February 20, 2013 9:59 AM To: Adam Greene; [email protected] Subject: Re: [c-nsp] IPSEC Tunnel between ASA and IOS (with redundant link) Dear Adam, Thanks for your reply, I have tried on ASA by entering crypto map mymap 15 set peer 1.1.1.1 2.2.2.2, but no success. Can you provide me the ASA example config with the same scenaro. Thanks. DS _____ From: Adam Greene <[email protected] <mailto:[email protected]> > To: [email protected] <mailto:[email protected]> Sent: Wednesday, February 20, 2013 7:16 PM Subject: Re: [c-nsp] IPSEC Tunnel between ASA and IOS (with redundant link) DS, On the ASA it's pretty much as simple as adding a secondary peer in the crypto map, and duplicating the tunnel-group configurations for the second peer. On the 2811, the establishment of the secondary tunnel will depend on the existence of a route in the routing table over the secondary link. Thanks, Adam -----Original Message----- From: [email protected] <mailto:[email protected]> [mailto:[email protected] <mailto:[email protected]> ] On Behalf Of Bunny Singh Sent: Wednesday, February 20, 2013 1:58 AM To: [email protected] <mailto:[email protected]> Subject: [c-nsp] IPSEC Tunnel between ASA and IOS (with redundant link) HI, i have a cisco asa 5520 at site A and cisco 2811 at site B with two P2P links (Redundant) Link, Now i want to know the configuration to built a redundant ipsec tunnel. I have read couple of article, but didn't got the success. Ospf routing is running between these devices. Regards DS _______________________________________________ cisco-nsp mailing list [email protected] <mailto:[email protected]> https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list [email protected] <mailto:[email protected]> https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
