Dynamic IOS to static ASA 8.x, how to use other than DefaultL2LGroup?

kbyrd · ‎05-26-2008

Using DefaultL2LGroup tunnel-group, I am able to bring up a L2L tunnel from an IOS Cisco871 hub that is dynamically addressed to a static spoke ASA running 8.x. Authentication is via PSK. How can I use a tunnel-group other than DefaultL2LGroup? It seems like I would have to pass a tunnel-group name from the IOS spoke to the ASA during Phase 1, but I can't see how to do that.

Thanks.

srue · ‎05-26-2008

the tunnel group name normally for L2L is just the IP of the remote. since the remote is dynamically assigned, you will have to create a dynamic crypto map.

here ya go:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080809222.shtml

kbyrd · ‎05-26-2008

Thanks for the link, but that was for EZ VPN. I have a dynamic map. It actually works. I just want to use a TG other than DefaultL2LGroup