I have two cisco routers one is setup with Static IP address.
Now two sites connect to this router, one of them has got Static IP address.
While the second site that needs to connect to this VPN router has got dynamic IP.
config
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp key removed address 10.10.10.1
crypto isakmp key removed address 0.0.0.0 0.0.0.0
!
!
crypto ipsec transform-set MYSET_2 esp-3des esp-sha-hmac
crypto ipsec transform-set MYSET_3 esp-3des esp-sha-hmac
!
crypto map mymap 2 ipsec-isakmp
set peer ?.?.?.?
set transform-set MYSET_2
match address 102
crypto map mymap 3 ipsec-isakmp
set peer 10.10.10.1
set transform-set MYSET_3
match address 103
Now VPN connection to the site with ip address of 10.10.10.1 works fine because it has got static ip.
My question is it possible to remove set peer command for second connection so that it works.
or is there any other way of configuring it.
because i do not have static ip so do i need to use set peer command for second connection and will it work if i remove set peer command.
please help
thanks
Now two sites connect to this router, one of them has got Static IP address.
While the second site that needs to connect to this VPN router has got dynamic IP.
config
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp key removed address 10.10.10.1
crypto isakmp key removed address 0.0.0.0 0.0.0.0
!
!
crypto ipsec transform-set MYSET_2 esp-3des esp-sha-hmac
crypto ipsec transform-set MYSET_3 esp-3des esp-sha-hmac
!
crypto map mymap 2 ipsec-isakmp
set peer ?.?.?.?
set transform-set MYSET_2
match address 102
crypto map mymap 3 ipsec-isakmp
set peer 10.10.10.1
set transform-set MYSET_3
match address 103
Now VPN connection to the site with ip address of 10.10.10.1 works fine because it has got static ip.
My question is it possible to remove set peer command for second connection so that it works.
or is there any other way of configuring it.
because i do not have static ip so do i need to use set peer command for second connection and will it work if i remove set peer command.
please help
thanks