Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Spotlight January 2018 Silver

PIX 506E configuration question

Hi

I have a pix connected to 2 remote sites (1 & 2 vpn 3000 concentrator on both end sites) I would like to configure the PIX having a principal server (site 1)and a secondary server (site 2)in case principal tunnel fails the second become active

If posible to have this kind of config on a PIX 506E?

Thanks a lot

1 REPLY
Hall of Fame Super Blue

Re: PIX 506E configuration question

Hi

Yes you can have 2 entries under your crypto map statement ie.

crypto map vpnset 1 ispec-isakmp

crypto map vpnset 1 set peer "site 1 vpn3000 ip address"

crypto map vpnset 1 set peer "site 2 vpn3000 ip address"

...

The pix will use the 2nd site vpn 3000 if it doesn't get a response from site 1 vpn 3000.

HTH

Jon

211
Views
0
Helpful
1
Replies
CreatePlease to create content