Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

IPSEC site-to-site VPN on ASR 9001

Hi,

does the new versions of IOS-XR on ASR 9001 support IPSEC site-to-site VPN for partner tunnels?

Thanks a lot.

Regards,

J

Everyone's tags (1)
2 ACCEPTED SOLUTIONS

Accepted Solutions
Cisco Employee

Hi Jordi,We are getting ipsec

Hi Jordi,

We are getting ipsec support with the "help"of the VSM (virtual services module).

this module carries as bunch of cpu's on top of which applications can be loaded. eg CGN, coming soon IPSEC and DPI also.

This module requires a slot. The asr9001 doesnt have slots so it can't carry the VSM, for which you need a 9904/9006/9010/9922.

There was talks about a crypto MPA too, I need to check in on that and will report back if there are plans for it.

regards

xander

Xander Thuijs CCIE #6775 Principal Engineer ASR9000, CRS, NCS6000 & IOS-XR
Cisco Employee

Hi Jordi,Got some additional

Hi Jordi,

Got some additional information:

XR 5.2.0 will provide the IPSEC support with the VSM.

There are currently no plans for an MPA for the ASR9001.

regards

xander

Xander Thuijs CCIE #6775 Principal Engineer ASR9000, CRS, NCS6000 & IOS-XR
6 REPLIES
Hall of Fame Super Gold

Duplicate posts.   Go here:

Duplicate posts.  

 

Go here:  http://supportforums.cisco.com/discussion/12207711/ipsec-site-site-vpn-transparent-more

New Member

Hi Leo,here I ask if the

Hi Leo,

here I ask if the ASR9001 can do IPSEC tunnel and in the other post I ask if the ASA FW can do IPSEC tunnel in transparent mode. I don't agree is the same question... one is a router the other one is firewall...

 

thanks.

 

J

Cisco Employee

Hi Jordi,We are getting ipsec

Hi Jordi,

We are getting ipsec support with the "help"of the VSM (virtual services module).

this module carries as bunch of cpu's on top of which applications can be loaded. eg CGN, coming soon IPSEC and DPI also.

This module requires a slot. The asr9001 doesnt have slots so it can't carry the VSM, for which you need a 9904/9006/9010/9922.

There was talks about a crypto MPA too, I need to check in on that and will report back if there are plans for it.

regards

xander

Xander Thuijs CCIE #6775 Principal Engineer ASR9000, CRS, NCS6000 & IOS-XR
New Member

Thanks a lot Xander for the

Thanks a lot Xander for the info.

 

Regards,

 

J

Cisco Employee

Hi Jordi,Got some additional

Hi Jordi,

Got some additional information:

XR 5.2.0 will provide the IPSEC support with the VSM.

There are currently no plans for an MPA for the ASR9001.

regards

xander

Xander Thuijs CCIE #6775 Principal Engineer ASR9000, CRS, NCS6000 & IOS-XR
New Member

Thanks a lot Xander,I will

Thanks a lot Xander,

I will use IPSEC on the FW then.

 

Thanks.

 

Regards,

J

746
Views
0
Helpful
6
Replies