IPSec VPN on Catalysts

[eizner]

Tried to configure IPSec site to site VPN on two catalysts 6506 and no luck. IOS seems to support it but VPN Tunnel will not come up.

Debugging crypto ipsec gives me:

ipsec_input_classify, ret = FIB_FEATURE_NOERROR
crypto_engine_select_crypto_engine: can't handle any more
Sa_req is NULL

Do Catalysts 6500 series support IPSec VPN w/o installing VPNSM or VPN SPA ?

[Jennifer Halim]

No, this is not supported on 6500 switch if you do not have VPN-SPA.

You can only configure IPSec VPN Client to manage the switch itself.

If you would like to terminate LAN-to-LAN or VPN Client on 6500, you would need to have VPN-SPA module.