Use different Ipsec protocol for different Traffic

[wongsusanto]

Hi All,

How can I apply using different Ipsec protocol for different traffics, Say I want to use ESP for http and and AH for ftp, Is there a sample configuration in cisco website ?

thanks for your help..

Regards

[vijkrish]

I don't have a readymade sample, but here is the logic:

ACL 120 is for http traffic

ACL 180 is for ftp traffic

Define 2 ipsec transform sets with name httpset and ftpset (for example),

Define 2 crypto maps with different sequence numbers

Under crypto map httpmap, specify match address 120 and httpset

under crypto map ftpmap, specify match address 180 and ftpset

apply the crypto map to the interface.

hope this helps,

Vijay