Configuring an IPsec Router Dynamic LAN-LAN peer and VPN clients

Unanswered Question
Jul 19th, 2009

I need to connect remote vpn and site to site vpn on same interface, but I am not able to connect site to site vpn, and didnt find any debug messsage of isakmp either, I have attached the configuration, please help me out

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
pompeychimes Sun, 07/19/2009 - 07:24

On the hub router i see "crypto map mymap" configured on f0/0 but there appears to be no crypto map called "crypto map mymap" configured on the router.

Elvin Arias Sun, 02/06/2011 - 12:30


The problem is that you crypto dynamic map entry has a higher priority than the crypto map static, so you must change it to have all in order.

in other words you crypto dynamic map must have a higher sequence number than the static crypto map

Here is an example:

crypto map VPN 10 ipsec-isakmp

set transform-set TRASNFOR-IPSEC

set peer X.X.X.X

match addresss ACL

crypto dynamic-map VPN 50000

set transform-set TRASNFOR-IPSEC


If don't work you can reply [email protected]


This Discussion