Single remote IP for IPSec router-to-router VPN

Answered Question
Apr 26th, 2010
User Badges:

Hi, I'm setting up a VPN to another company, and they've provided one routable IP address to be both their peer and their local internal system that we need access to.  Can I use the remote peer address in the crypto ACL?  I think they need to provide a second NAT IP for their internal system, otherwise the IPSec traffic from us destined for their peer will hit the crypto ACL.  What do you think?  Thanks!

Correct Answer by Jennifer Halim about 7 years 1 month ago

As long as only 1 end of the peer uses the IPSec peer (terminating ip address) in the crypto ACL, that is OK. You can't have both ends as being the crypto ACL.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Jennifer Halim Mon, 04/26/2010 - 04:39
User Badges:
  • Cisco Employee,

As long as only 1 end of the peer uses the IPSec peer (terminating ip address) in the crypto ACL, that is OK. You can't have both ends as being the crypto ACL.

Actions

This Discussion