Encrypting traffic on point to point link

[kiran_8095]

Hi All,

I have 2 sites connecting thro point to point link. I need to extend the vlan's between these sites (which is easy by just configuring this link as L2), but i need to encrypt the traffic flowing on this link. I can't configure IPSEC since its not L3 link. Please let me know how to configure encryption on L2 links.

Thanks in advance.

K

[Giuseppe Larosa]

Hello Kiran,

if you have a L2 LAN link I think there is no feature available to you for performing encryption in IOS.

two options:

- to find and deploy external boxes that do the encryption/decryption

- move back to a L3 link and combine L2TPv3 + IPSec

for L2TPv3 see

http://www.cisco.com/en/US/docs/ios/12_3t/12_3t2/feature/guide/gtl2tpv3.html

you can then configure IPSec to encrypt the IP packets of the L2TPv3 tunnel.

this is possible if you have ISR routers like C2811 or better.

Hope to help

Giuseppe