Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Trouble with Multihomed Router and EasyVPN

Hi! I've set up a router with two ISP connections. One connection is through Ethernet and the other is over a multilink ppp interface. Since the IPs on the multilink ppp interface are private, I put the public IPs on a vlan interface. So the outbound interface is not the same interface as the interface with the public IPs for the second ISP.

I've been load balancing outbound traffic by using a route-map, and I set up a route-map as the ip local policy in order to be able to reach the router from both ISPs.

I can set up easyvpn using the GUI wizard on the ethernet connection no problem (with the first ISP). When I set up easyvpn on the second isp (the multilink ppp one), then I get connected, can do ICMP pings but nothing else, no telnet, no traceroute (udp) and no traffic to internal hosts.

I've removed all access-lists, route-maps and I've re-written the easyvpn config several times. I discovered that if I set up the ISAKMP profile for the second (multilink) ISP like this:

crypto isakmp profile sdm-ike-profile-3

match identity group AdminsVPN2

client authentication list sdm_vpn_xauth_ml_6

isakmp authorization list sdm_vpn_group_ml_4

client configuration address respond

virtual-template 7

local-address Vlan703

It would help since easyvpn would not try to originate VPN traffic from the multilink interface.

I'm running enhanced easyvpn, thus I'm not using any crypto maps.. I got a similar config to work using crypto maps using:

crypto map SDM_CMAP_2 local-address Loopback0

But I wanted to get the same accomplished on the enhanced EasyVPN, but I can't seem to find the equivalent.

I haven't found any info regarding EasyVPN on a multihomed router, I'd really appreciate some links or some tips!

Can anyone shed some light on the subject?

I'm kinda stumped here.

thanks in advance for taking the time to read this!

  • VPN
1 REPLY
Bronze

Re: Trouble with Multihomed Router and EasyVPN

follow up on the following link for more information on EasyVPN on a multi homed Router:

http://www.cisco.com/en/US/docs/ios/12_2t/12_2t8/feature/guide/ftunity.html#wp1191206

153
Views
0
Helpful
1
Replies
This widget could not be displayed.