Multiple Site-to-Site VPNs with PIX 6.3(5) Can it be done?!

Answered Question
Sep 19th, 2007

Hi

I've set up a VPN tunnel between two PIXes (eg PIX A and PIX B) running 6.3(5). This works fine. I then tried to add another VPN tunnel from PIX A to a new PIX C. This didn't work! It would appear that I can only assign one crypto map, and therefore one tunnel, to one phyical interface on PIX A. Is this right? I assumed you could run multiple VPN tunnels from a single physical interface.

Any advise gratefully recevied!

Regards

Paul

I have this problem too.
0 votes
Correct Answer by a.alekseev about 9 years 4 months ago

You can use something like this

crypto map VPN-MAP 10 ipsec-isakmp

crypto map VPN-MAP 10 match address B-VPN

crypto map VPN-MAP 10 set peer b.b.b.b

crypto map VPN-MAP 10 set transform-set ESP-AES256-MD5

crypto map VPN-MAP 20 ipsec-isakmp

crypto map VPN-MAP 20 match address C-VPN

crypto map VPN-MAP 20 set peer c.c.c.c

crypto map VPN-MAP 20 set transform-set ESP-AES256-MD5

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
a.alekseev Wed, 09/19/2007 - 02:28

You can use something like this

crypto map VPN-MAP 10 ipsec-isakmp

crypto map VPN-MAP 10 match address B-VPN

crypto map VPN-MAP 10 set peer b.b.b.b

crypto map VPN-MAP 10 set transform-set ESP-AES256-MD5

crypto map VPN-MAP 20 ipsec-isakmp

crypto map VPN-MAP 20 match address C-VPN

crypto map VPN-MAP 20 set peer c.c.c.c

crypto map VPN-MAP 20 set transform-set ESP-AES256-MD5

Actions

This Discussion