IPSEC Issue

[bethamprashanth]

Hi experts,

I have designed lab setup for IPSEC VNP before getting it for real time deployment.

under testing Ive noticed few thing:

scenario:

--lan--1841 R1-- X-cable--1841 R2 --Lan

1. my tunnel always remains in QM_IDLE state even after removing x-cable

2. I cant run dynamic routing protocol, so i used static routes, is it GRE is only solution.

3. some say that u can establish vpn using loopback interface,

can some say what is the advantage of it,

and how do i implement

Thanking you,

Prashanth

[Collin Clark]

1. Try turning on DPD

http://www.cisco.com/en/US/docs/ios/12_3t/12_3t7/feature/guide/gtdpmo.html

2. Using a cross-over cable you should be able to use an IGP. Once deployed though you'll have to use GRE.

3. I have never heard of loopbacks terminating VPN's and I really don't see any benefits of it.

Hope this helps.