06-28-2006 10:07 PM
Hi
I have Ho and multple branch. Ho and br have cisco 2600 route . now i create vpn point to multpoint.
when i start configure,
i configure mode tunnel but one cisco guide mention point to multipoint configuration mode transport.
so i worried what i use ? mode tunnel or transport ?
thanks
Biplob
=====================
crypto isakmp policy 1
authentication pre−share
crypto isakmp key xxxx address 0.0.0.0 0.0.0.0
!
crypto ipsec transform−set trans2 esp−des esp−md5−hmac
mode transport
!
crypto map vpnmap1 local−address Ethernet0
crypto map vpnmap1 10 IPsec−isakmp
set peer 172.17.0.1
set security−association level per−host
set transform−set trans2
match address 101
!
interface Tunnel0
bandwidth 1000
ip address 10.0.0.3 255.255.255.0
ip mtu 1400
ip nhrp authentication test
ip nhrp map 10.0.0.1 172.17.0.1
ip nhrp network−id 100000
ip nhrp holdtime 300
ip nhrp nhs 10.0.0.1
delay 1000
tunnel source Ethernet0
tunnel destination 172.17.0.1
tunnel key xxx
!
interface Ethernet0
ip address dhcp hostname
06-29-2006 08:42 AM
Biplob
I have done it both ways and it works with mode tunnel or mode transport when you do IPSec with GRE tunnels. I understand that it is particularly appropriate to do more transport when doing IPSec with GRE tunnels. This saves a little overhead and reduces the need for 1 additional IP header when doing mode transport for IPSec with GRE tunnel.
HTH
Rick
07-02-2006 01:10 AM
Hi
Thanks
Biplob
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide