Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

EzVPN Remote with two Tunnels Concurrently ?

Hi,

I want configure EzVPN between remote office (Site C) for my secondary office (Site B). But there is already a  EzVPN configuration between Site C and my Head Office (Site A).
I created the configs, but when I apply the command "crypto ipsec client ezvpn VPN2" on the Interface, a warning saying that only one Tunnel is supported.

in Site C i have a Cisco C1861W-UC-2BRI-K9  with dynamic IP Address
in Site B i have a Cisco CISCO2921/K9 with static IP Address

Could anyone help me?
Only ONE Tunnel is supported in EzVPN Remote enviroment ?
Are there others options ?


Best Regards,
Daniel Stefani

Everyone's tags (7)
5 REPLIES
Cisco Employee

EzVPN Remote with two Tunnels Concurrently ?

Daniel,

I'm not sure about all the requirements you have from your system (or limitations of your hardware)

,but DMVPN could be the best way to get both secure connections up and running :-)

M.

VIP Purple

EzVPN Remote with two Tunnels Concurrently ?

Another option in addition to the DMVPN that Marcin mentioned is the use of dynamic VTIs. These are a little bit easier to implement (in my opinion) then DMVPN.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

Cisco Employee

EzVPN Remote with two Tunnels Concurrently ?

Indeed, without need for full mesh connectivity, VTI is the choice. But as I said it depend on requirements... There is also Flex ;-)

VIP Purple

EzVPN Remote with two Tunnels Concurrently ?

I would say that I'm quite brave in regard to new technology, but I think I wouldn't try Flex in productivity (yet).

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

Cisco Employee

EzVPN Remote with two Tunnels Concurrently ?

Several pretty big customers are running it already ;-)

Major problem is IKEv2 support on certain platforms (ISR G1 for example).

If you think about it, it's same technology, GREoIPsec/VTI/IPsec just bound together in one new framework under IKEv2.

I have not see so much effort put into testing any feature before as for this - TAC was also heavily involved.

Anyway it's out there, it's a possibility, it's the future :-)

M.

472
Views
0
Helpful
5
Replies
CreatePlease to create content