cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
421
Views
0
Helpful
3
Replies

Site to Site VPN connect on initiation.

sboivin
Level 1
Level 1

We are setting up Site to Site VPNs over a 3g wireless network. We need for this site to sit only to connect when something is initiated from either side. Can i just set a timeout on each end? Is site to site over a 3g network possible?

3 Replies 3

Jon Marshall
Hall of Fame
Hall of Fame

Hi

Yes set your Phase 1 and Phase 2 settings as low as you can.

Yes it should be possible over a 3G network as we run our remote access VPN's over 3G. As long as the 3G network transports IP it's possible.

HTH

Jon

So i should drop my Phase 1 and 2 down to DES/MD5?

Hi

Sorry no, i meant the phase 1 and phase 2 timeouts eg.

iskamp policy 10 lifetime "seconds"

crypto map vpn-set 1 set security-association lifetime "seconds"

Jon