cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
411
Views
0
Helpful
3
Replies

Site to Site VPN connect on initiation.

sboivin
Level 1
Level 1

We are setting up Site to Site VPNs over a 3g wireless network. We need for this site to sit only to connect when something is initiated from either side. Can i just set a timeout on each end? Is site to site over a 3g network possible?

3 Replies 3

Jon Marshall
Hall of Fame
Hall of Fame

Hi

Yes set your Phase 1 and Phase 2 settings as low as you can.

Yes it should be possible over a 3G network as we run our remote access VPN's over 3G. As long as the 3G network transports IP it's possible.

HTH

Jon

So i should drop my Phase 1 and 2 down to DES/MD5?

Hi

Sorry no, i meant the phase 1 and phase 2 timeouts eg.

iskamp policy 10 lifetime "seconds"

crypto map vpn-set 1 set security-association lifetime "seconds"

Jon

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: