Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

ios vpn aggressive mode with hostname

Hi,

When I entered the command below on the router:

crypto isakmp peer hostname www.cisco.com

The router automatically changes the command to:

crypto isakmp peer address 198.133.219.25

Is it possible to keep the hostname in the configure?

Thanks,

Wei

2 REPLIES
Bronze

Re: ios vpn aggressive mode with hostname

You can able to configure the host name in the aggressive mode.

The following example shows how to initiate aggressive mode using RADIUS tunnel attributes:

crypto isakmp peer ip-address 209.165.200.230 vrf vpn1

set aggressive-mode client-endpoint user-fqdn user@cisco.com

set aggressive-mode password cisco123

Community Member

Re: ios vpn aggressive mode with hostname

Thanks. I got the same conclusion too. The problem is that you can only use IP address for the "crypto isakmp peer" command. Even though it has the hostname option, the router will automatically convert it to IP address. This defeats the main purpose which is to setup LAN-2-LAN VPN without reference to IP address.

In summary, at this point of time, I don't think it is possible to use hostname for LAN-2-LAN VPN on Cisco router/ASA alone, if preshared key authentication is used.

The alternation option is to use certificate for authentication, or use third party router as the aggressive mode initiator.

Regards,

Wei

390
Views
0
Helpful
2
Replies
CreatePlease to create content