Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

IPSec hub and spoke question

Is it possible to have LAN 2 LAN VPN, hub site with dynamic and sopkes with set peer, but, hub site still can initiate a call (without set peer)? I know the DMVPN is a solution but how about traditional VPN ?

thanks

1 REPLY
Silver

Re: IPSec hub and spoke question

With "dynamic Crypto-map", a peer cannot initiate an IPSec VPN connection, but can only receive incoming connection. All relevant paramaters are negotiated and used during the VPN session.

You can try combining a dynamic crypto-map into a static crypto-map to achieve your goal, but I am not sure if there would be any other issues.

104
Views
0
Helpful
1
Replies