Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Help on Site-to-Site IPsec VPN

I would like to create a site-to-site IPSec VPN on Cisco 1941 router.

1. What license do i need for the routers (k9 or sec/k9)?

2. Do I need static public IP addresses for all of the sites?

3. Is there a limit on the number of sites?

 

Thanks in advance for your help.

2 REPLIES

You will need sec/k9 for VPN.

You will need sec/k9 for VPN. It could be easier with static addresses or at least one site as static. Others can be dynamic and you will be required to use a dynamic crypto map. You will be limited to your hardware (not sure of the number) but you could look into DMVPN and see if that would be a better fit for your needs.

Hi,Please find the answers

Hi,

Please find the answers for your queries.

1. What license do i need for the routers (k9 or sec/k9)?

Ans: You need to update with Security Technology Package License (SL-19-SEC-K9(=) / L-SL-19-SEC-K9= )

2. Do I need static public IP addresses for all of the sites?

Ans: You have options... If you have hub site and all other spoke sites connecting to it... you can have a static address at your hub site and other sites you can have dynamic ip address for peer.

3. Is there a limit on the number of sites?

Ans: Yes, there should be some limit on the VPN peers.

 

Regards

Karthik

61
Views
0
Helpful
2
Replies
CreatePlease to create content