Maybe you could help me out . I will explain the situation and what I want to setup:
The configuration needs to be similiar to this Configuration Template but will need a second tunnel included for backup. (**Note: For each tunnel I am required to use a different tunnel source. Each source being a WAN ip address.**)
crypto isakmp policy 1
encryption [ENCRYPTION TYPE]
hash [HASH TYPE]
authentication pre-share
group 2
crypto isakmp key [SECRET] address [REMOTE IP]
!
crypto ipsec transform-set [NAME] [TRANSFORM 1]
mode transport
!
crypto map [MAP NAME] 10 ipsec-isakmp
set peer peer [REMOTE IP ADDRESS]
set transform-set [TRANSFORM-SET NAME]
match address [ACCESS-LIST NUMBER OR NAME]
!
access-list [ACL NUMBER OR NAME] permit gre host
[LOCAL IP] host [REMOTE IP]
!
interface [INTERFACE NAME/NUMBER]
ip address [LOCAL IP]
crypto map [MAP NAME]
!
interface Tunnel0
ip address [LOCAL TUNNEL IP] 255.255.255.252
tunnel source [LOCAL INTERFACE IP]
tunnel destination [REMOTE IP]
!
router bgp [LOCAL AS NUMBER]
neighbor [VZW TUNNEL IP] remote-as 22394
network [INTERNAL NETWORK] mask [MASK]
The are the Requirements given to me from the vendor we are working with:
The IPSec tunnel endpoint and GRE tunnel endpoints must both reside on the same physical customer device.
BGP peering relationship between each Private Network connecting via VPN.
GRE is required because:
Allows for passing non-IP traffic (including Multicast, etc)
Creates a logical WAN Interface (with a /30 customer provided network).
Allows the Enterprise to extend their internal private network to the Wireless Private Network router.
Allows for simple EBGP peering at the GRE tunnel endpoints.
The Enterprise can make changes to their IP addressing without needing to notify Wireless Vendor.
Thanks. Any help would be greatly appreciated. Thanks.
