Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Virtual Tunnel Interface (VTI) Hub Router Configuration

When configuring multiple VTI tunnels on a hub router, is it recommended that each tunnnel use a unique transform-set and ipsec profile, or they can all share the same configuration.

Example:

crypto isakmp policy 1

encr 3des

authentication pre-share

group 2

crypto isakmp key ******** address 0.0.0.0 0.0.0.0

crypto isakmp keepalive 10

!

!

crypto ipsec transform-set TSET esp-3des esp-sha-hmac

!

crypto ipsec profile VTI

set transform-set TSET

!

Thanks.-

1 ACCEPTED SOLUTION

Accepted Solutions

Re: Virtual Tunnel Interface (VTI) Hub Router Configuration

Hi,

The IPsec profile can be shared.

You could also create multiple transform set and reference it to IPsec profile and then apply it to a specific VTI.

Sent from Cisco Technical Support iPhone App

1 REPLY

Re: Virtual Tunnel Interface (VTI) Hub Router Configuration

Hi,

The IPsec profile can be shared.

You could also create multiple transform set and reference it to IPsec profile and then apply it to a specific VTI.

Sent from Cisco Technical Support iPhone App

144
Views
0
Helpful
1
Replies
CreatePlease login to create content