Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Site to Site VPN connect on initiation.

We are setting up Site to Site VPNs over a 3g wireless network. We need for this site to sit only to connect when something is initiated from either side. Can i just set a timeout on each end? Is site to site over a 3g network possible?

3 REPLIES
Hall of Fame Super Blue

Re: Site to Site VPN connect on initiation.

Hi

Yes set your Phase 1 and Phase 2 settings as low as you can.

Yes it should be possible over a 3G network as we run our remote access VPN's over 3G. As long as the 3G network transports IP it's possible.

HTH

Jon

New Member

Re: Site to Site VPN connect on initiation.

So i should drop my Phase 1 and 2 down to DES/MD5?

Hall of Fame Super Blue

Re: Site to Site VPN connect on initiation.

Hi

Sorry no, i meant the phase 1 and phase 2 timeouts eg.

iskamp policy 10 lifetime "seconds"

crypto map vpn-set 1 set security-association lifetime "seconds"

Jon

122
Views
0
Helpful
3
Replies