IP Route

Unanswered Question
Jul 10th, 2007
User Badges:

Hi Guys,

I need some little help. Im trying to establish a Site2Site VPN going to MCI Verizon. Problem is my WAN Interface that im going to peer is a subinterface of the FE0/1. And the Primary is giving as SRC on the IPSEC info. It should be the Subinterface of the FE0/1.


interface FastEthernet0/1

ip address secondary

ip address

Router#sh crypto isakmp sa

dst src state conn-id slot status MM_NO_STATE 0 0 ACTIVE

My question is, how can i change the IP of the Cisco is giving to send the subinterface IP and the the Primary IP as SRC address?

Or should i swap the designation of the IPs in the interface instead such as Im going to put as Primary and the other as Secondary?

Thanks, let me know if im expressing it correctly.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
royalblues Tue, 07/10/2007 - 11:07
User Badges:
  • Green, 3000 points or more


If you want the IPs to be sourced from the subinterface then the crypto map should be applied to the subinterface.

The config you posted do not show the subinterface configuration but only a secondary address on the interface.

am i missing something here?



This Discussion