VPN - Pix to Router

[keyur-desai]

Our site router (1720) overseas has a private address assigned by the local ISP on the serial port. The router ethernet port has registered IP addresses. How do I configure the peer on the PIX side (can't use the serial port on private address), and which interface do I apply the crypto map on the router. Using ISAKMP with pre-shared keys.

[cjacinto]

You have to use the public ip address of the router on the ethernet as the ipsec peer on the pix. On the router you could configure as normal and apply the crypto map on the serial interface but add a crypto map

see:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/secur_r/srprt4/sripsec.htm#xtocid1231443