Balaji,
This is the configuration on the cellular interface of the 1100. As you can see, there is an existing crypto map already on the interface. It is that crypto map that allows us to have remote connectivity to the router thru other tunnels which connect back to our HQ location and our DR location respectively:
interface Cellular0/2/0
description ***** VzW EVDO Interface *****
ip address negotiated
ip tcp adjust-mss 1388
dialer in-band
dialer idle-timeout 60
dialer watch-group 1
dialer-group 1
ipv6 enable
pulse-time 1
crypto map ICCP_BACKUP
ip virtual-reassembly
Here is the existing crypto map entitled "ICCP_BACKUP". I am changing the IP's as those are public. You can see there are 4 sequences of the crypto map:
crypto map ICCP_BACKUP 50 ipsec-isakmp
set peer 123.123.123.206
set transform-set ODEC_WAN
match address 100
crypto map ICCP_BACKUP 70 ipsec-isakmp
set peer 134.134.134.218
set transform-set ODEC_WAN
match address 100
crypto map ICCP_BACKUP 80 ipsec-isakmp
set peer 135.135.135.14
set transform-set ODEC_WAN
match address 110
crypto map ICCP_BACKUP 90 ipsec-isakmp
set peer 136.136.136.26
set transform-set ODEC_WAN
match address 120
!
What we have attempted to do without success is add the following sequence # to it without lifting the crypto map off of the interface:
We add the transform set we want to use:
crypto ipsec transform-set BCCSCADA esp-aes esp-sha-hmac
mode transport
then we set another sequence # (which we are using sequence # 95) within the crypto map entitled "ICCP_BACKUP" as follows:
crypto map ICCP_BACKUP 95 ipsec-isakmp
set peer 137.137.137.26
set transform-set BCCSCADA
match address GREINIPSEC
It is when we apply the additional sequence number 95 that we loose connectivity to the router.
My thoughts are that we are not able to manipulate a crypto map that is attached to an interface. That is what my memory is telling me from years ago. Is this accurate? Is that the reason that when we add the additional sequence number but have not removed it from the interface, that it breaks it? Thanks as always!
