cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
376
Views
0
Helpful
1
Replies

Crypto map with ppp multilink fragmentation

blaherv
Level 1
Level 1

Hello,

I try to establish an IPSEC tunnel between two 2621 routers on a serial line and we want to do voice over IP on that line. So, we have to do fragmentation. We have this configuration on each router:

int multilink 1

bandwith 512

ip address 192.168.0.x 255.255.255.252

ppp multilink

ppp multilink fragment-delay 10

ppp multilink interleave

multilink-group 1

interface s2/1

bandwith 512

no ip address

encapsulation ppp

ppp multilink

multilink-group 1

The problem is that I would like to apply an IPSEC policy but it doesn't work if I apply crypto map to interface s2/1 and/or interface multilink1.

If I delete interface multilink on both sides, the crypto map IPSEC works well.

So I am sure that IPSEC configuration itself is correct but I don't know if it's possible to implement it with ppp multilink configured on a serial line.

Does anybody have an idea in order to make IPSEC work with ppp multilink on interface serial ?

Thanks,

Herve

1 Reply 1

pradeepde
Level 5
Level 5

IPSec should perfectly work on multilink interfaces, but IPSec does not support fragmentation.