Single remote IP for IPSec router-to-router VPN

Answered Question
Apr 26th, 2010

Hi, I'm setting up a VPN to another company, and they've provided one routable IP address to be both their peer and their local internal system that we need access to.  Can I use the remote peer address in the crypto ACL?  I think they need to provide a second NAT IP for their internal system, otherwise the IPSec traffic from us destined for their peer will hit the crypto ACL.  What do you think?  Thanks!

I have this problem too.
0 votes
Correct Answer by Jennifer Halim about 6 years 9 months ago

As long as only 1 end of the peer uses the IPSec peer (terminating ip address) in the crypto ACL, that is OK. You can't have both ends as being the crypto ACL.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Jennifer Halim Mon, 04/26/2010 - 04:39

As long as only 1 end of the peer uses the IPSec peer (terminating ip address) in the crypto ACL, that is OK. You can't have both ends as being the crypto ACL.

Actions

This Discussion