11-23-2008 06:40 PM - edited 02-21-2020 03:07 AM
Haven't done this in a while and am a little rusty. Need to change the ipsec site to site peer address on a tunnel, a one router is changing locations/ip address.
The current cryptomap config is :
crypto isakmp policy 11
encr 3des
hash md5
authentication pre-share
!
crypto isakmp policy 12
hash md5
authentication pre-share
crypto isakmp key abc12345 address 206.169.4.20
crypto isakmp key XXXXX address 66.194.7.3
crypto isakmp key XXXXX address 66.162.45.164
crypto isakmp key XXXX address 168.215.214.202
!
!
crypto ipsec transform-set set1 esp-3des esp-md5-hmac
!
crypto dynamic-map dynmap 20
set transform-set set1
match address 120
!
!
crypto map map1 local-address Serial1
crypto map map1 client configuration address initiate
crypto map map1 client configuration address respond
crypto map map1 11 ipsec-isakmp
set peer 206.169.4.20
set peer 66.194.7.3
set peer 66.162.45.164
set peer 168.215.214.202
set transform-set set1
match address 120
The current address of the router that will be changing is 66.162.45.164
I think all I have to do once they get the router at the other end configured is to change the 66.162.45.164 address in the cryptomap to the new ip address, is that correct?
Solved! Go to Solution.
11-23-2008 09:42 PM
Hi,
Yes, that is correct. Also, make sure that you configure the crypto isakmp key with the correct Pre shared key and IP Address.
set peer NEWADDRESS
crypto isakmp key XXXXX address NEWADDRESS
Regards,
Arul
*Pls rate if it helps*
11-23-2008 09:42 PM
Hi,
Yes, that is correct. Also, make sure that you configure the crypto isakmp key with the correct Pre shared key and IP Address.
set peer NEWADDRESS
crypto isakmp key XXXXX address NEWADDRESS
Regards,
Arul
*Pls rate if it helps*
11-23-2008 09:45 PM
Thanks!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide