Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Configuring an IPsec Router Dynamic LAN-LAN peer and VPN clients

I need to connect remote vpn and site to site vpn on same interface, but I am not able to connect site to site vpn, and didnt find any debug messsage of isakmp either, I have attached the configuration, please help me out

2 REPLIES

Re: Configuring an IPsec Router Dynamic LAN-LAN peer and VPN cli

On the hub router i see "crypto map mymap" configured on f0/0 but there appears to be no crypto map called "crypto map mymap" configured on the router.

New Member

Re: Configuring an IPsec Router Dynamic LAN-LAN peer and VPN cli

Hello.

The problem is that you crypto dynamic map entry has a higher priority than the crypto map static, so you must change it to have all in order.

in other words you crypto dynamic map must have a higher sequence number than the static crypto map

Here is an example:

crypto map VPN 10 ipsec-isakmp

set transform-set TRASNFOR-IPSEC

set peer X.X.X.X

match addresss ACL

crypto dynamic-map VPN 50000

set transform-set TRASNFOR-IPSEC

reverse-route

If don't work you can reply cerveros1503@gmail.com

614
Views
0
Helpful
2
Replies
CreatePlease to create content