07-17-2007 06:54 AM - edited 02-21-2020 03:09 PM
We are setting up Site to Site VPNs over a 3g wireless network. We need for this site to sit only to connect when something is initiated from either side. Can i just set a timeout on each end? Is site to site over a 3g network possible?
07-17-2007 09:42 AM
Hi
Yes set your Phase 1 and Phase 2 settings as low as you can.
Yes it should be possible over a 3G network as we run our remote access VPN's over 3G. As long as the 3G network transports IP it's possible.
HTH
Jon
07-17-2007 11:11 AM
So i should drop my Phase 1 and 2 down to DES/MD5?
07-17-2007 09:39 PM
Hi
Sorry no, i meant the phase 1 and phase 2 timeouts eg.
iskamp policy 10 lifetime "seconds"
crypto map vpn-set 1 set security-association lifetime "seconds"
Jon
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: