Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Crypto map with ppp multilink fragmentation

Hello,

I try to establish an IPSEC tunnel between two 2621 routers on a serial line and we want to do voice over IP on that line. So, we have to do fragmentation. We have this configuration on each router:

int multilink 1

bandwith 512

ip address 192.168.0.x 255.255.255.252

ppp multilink

ppp multilink fragment-delay 10

ppp multilink interleave

multilink-group 1

interface s2/1

bandwith 512

no ip address

encapsulation ppp

ppp multilink

multilink-group 1

The problem is that I would like to apply an IPSEC policy but it doesn't work if I apply crypto map to interface s2/1 and/or interface multilink1.

If I delete interface multilink on both sides, the crypto map IPSEC works well.

So I am sure that IPSEC configuration itself is correct but I don't know if it's possible to implement it with ppp multilink configured on a serial line.

Does anybody have an idea in order to make IPSEC work with ppp multilink on interface serial ?

Thanks,

Herve

1 REPLY
Bronze

Re: Crypto map with ppp multilink fragmentation

IPSec should perfectly work on multilink interfaces, but IPSec does not support fragmentation.

210
Views
0
Helpful
1
Replies
CreatePlease login to create content