https://community.cisco.com/t5/vpn/trouble-with-multihomed-router-and-easyvpn/m-p/1151460#M22054 <P>Hi! I've set up a router with two ISP connections. One connection is through Ethernet and the other is over a multilink ppp interface. Since the IPs on the multilink ppp interface are private, I put the public IPs on a vlan interface. So the outbound interface is not the same interface as the interface with the public IPs for the second ISP.</P><P></P><P>I've been load balancing outbound traffic by using a route-map, and I set up a route-map as the ip local policy in order to be able to reach the router from both ISPs.</P><P></P><P>I can set up easyvpn using the GUI wizard on the ethernet connection no problem (with the first ISP). When I set up easyvpn on the second isp (the multilink ppp one), then I get connected, can do ICMP pings but nothing else, no telnet, no traceroute (udp) and no traffic to internal hosts.</P><P></P><P>I've removed all access-lists, route-maps and I've re-written the easyvpn config several times. I discovered that if I set up the ISAKMP profile for the second (multilink) ISP like this:</P><P></P><P>crypto isakmp profile sdm-ike-profile-3</P><P> match identity group AdminsVPN2</P><P> client authentication list sdm_vpn_xauth_ml_6</P><P> isakmp authorization list sdm_vpn_group_ml_4</P><P> client configuration address respond</P><P> virtual-template 7</P><P> local-address Vlan703</P><P></P><P>It would help since easyvpn would not try to originate VPN traffic from the multilink interface.</P><P></P><P>I'm running enhanced easyvpn, thus I'm not using any crypto maps.. I got a similar config to work using crypto maps using:</P><P></P><P>crypto map SDM_CMAP_2 local-address Loopback0</P><P></P><P>But I wanted to get the same accomplished on the enhanced EasyVPN, but I can't seem to find the equivalent.</P><P></P><P>I haven't found any info regarding EasyVPN on a multihomed router, I'd really appreciate some links or some tips!</P><P></P><P>Can anyone shed some light on the subject?</P><P></P><P>I'm kinda stumped here.</P><P></P><P>thanks in advance for taking the time to read this!</P> Tue, 26 May 2009 05:32:04 GMT estebanzarikian 2009-05-26T05:32:04Z https://community.cisco.com/t5/vpn/trouble-with-multihomed-router-and-easyvpn/m-p/1151460#M22054 <P>Hi! I've set up a router with two ISP connections. One connection is through Ethernet and the other is over a multilink ppp interface. Since the IPs on the multilink ppp interface are private, I put the public IPs on a vlan interface. So the outbound interface is not the same interface as the interface with the public IPs for the second ISP.</P><P></P><P>I've been load balancing outbound traffic by using a route-map, and I set up a route-map as the ip local policy in order to be able to reach the router from both ISPs.</P><P></P><P>I can set up easyvpn using the GUI wizard on the ethernet connection no problem (with the first ISP). When I set up easyvpn on the second isp (the multilink ppp one), then I get connected, can do ICMP pings but nothing else, no telnet, no traceroute (udp) and no traffic to internal hosts.</P><P></P><P>I've removed all access-lists, route-maps and I've re-written the easyvpn config several times. I discovered that if I set up the ISAKMP profile for the second (multilink) ISP like this:</P><P></P><P>crypto isakmp profile sdm-ike-profile-3</P><P> match identity group AdminsVPN2</P><P> client authentication list sdm_vpn_xauth_ml_6</P><P> isakmp authorization list sdm_vpn_group_ml_4</P><P> client configuration address respond</P><P> virtual-template 7</P><P> local-address Vlan703</P><P></P><P>It would help since easyvpn would not try to originate VPN traffic from the multilink interface.</P><P></P><P>I'm running enhanced easyvpn, thus I'm not using any crypto maps.. I got a similar config to work using crypto maps using:</P><P></P><P>crypto map SDM_CMAP_2 local-address Loopback0</P><P></P><P>But I wanted to get the same accomplished on the enhanced EasyVPN, but I can't seem to find the equivalent.</P><P></P><P>I haven't found any info regarding EasyVPN on a multihomed router, I'd really appreciate some links or some tips!</P><P></P><P>Can anyone shed some light on the subject?</P><P></P><P>I'm kinda stumped here.</P><P></P><P>thanks in advance for taking the time to read this!</P> Tue, 26 May 2009 05:32:04 GMT https://community.cisco.com/t5/vpn/trouble-with-multihomed-router-and-easyvpn/m-p/1151460#M22054 estebanzarikian 2009-05-26T05:32:04Z https://community.cisco.com/t5/vpn/trouble-with-multihomed-router-and-easyvpn/m-p/1151461#M22055 <HTML><HEAD></HEAD><BODY><P>follow up on the following link for more information on EasyVPN on a multi homed Router:</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/ios/12_2t/12_2t8/feature/guide/ftunity.html#wp1191206" target="_blank">http://www.cisco.com/en/US/docs/ios/12_2t/12_2t8/feature/guide/ftunity.html#wp1191206</A></P><P></P></BODY></HTML> Fri, 29 May 2009 13:21:32 GMT https://community.cisco.com/t5/vpn/trouble-with-multihomed-router-and-easyvpn/m-p/1151461#M22055 tstanik 2009-05-29T13:21:32Z