07-17-2007 06:54 AM - edited 02-21-2020 03:09 PM
We are setting up Site to Site VPNs over a 3g wireless network. We need for this site to sit only to connect when something is initiated from either side. Can i just set a timeout on each end? Is site to site over a 3g network possible?
07-17-2007 09:42 AM
Hi
Yes set your Phase 1 and Phase 2 settings as low as you can.
Yes it should be possible over a 3G network as we run our remote access VPN's over 3G. As long as the 3G network transports IP it's possible.
HTH
Jon
07-17-2007 11:11 AM
So i should drop my Phase 1 and 2 down to DES/MD5?
07-17-2007 09:39 PM
Hi
Sorry no, i meant the phase 1 and phase 2 timeouts eg.
iskamp policy 10 lifetime "seconds"
crypto map vpn-set 1 set security-association lifetime "seconds"
Jon
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide