ASA VPN tunnel

[SathishkumarSaravanan0348]

Hello Experts,

Whether we can use the same policy and transform-set for multiple tunnels?

eg: I have created one policy and one transform-set in router(IKEv1).

I planned to add multiple crypto-map for different customer and separate interesting ACL in encryption domain.

Whether it will work?

Also what is mean by Cipher, I have come across while reading the encryption document.

Regards,

Sathish

[Marius Gunnerud]

Yes, you can do this.  Infact it is a good practice as this keeps configuration clutter to a minimum.

[bhargavdesai · Accepted solution]

You can use same ISAKM Policy and transform set (Phase-1 & 2) to secure multiple VPN tunnels. You do need to configure different ACL for interesting traffic, Peer IP configuration. Even you can use the same pre-shared key but you should use different for security reasons. You can only apply One crypto-map per interface so you need to create single crypto-map with multiple sequence number for different customers.
Below links might help you.

http://www.firewall.cx/cisco-technical-knowledgebase/cisco-routers/867-cisco-router-site-to-site-ipsec-vpn.html



HTH
### RATE ALL HELPFUL RESPONSES ###

[SathishkumarSaravanan0348]

Thanks for the information

[Marius Gunnerud · Accepted solution]

Also, a cipher is the algorithm used for encrypting and decrypting.  In VPN you have two ciphers or encryptions, first one is for the tunnel managment (ISAKMP), the second encryption is for the data traffic (IPsec).

[SathishkumarSaravanan0348]

Thank you