crypto maps

[carl_townshend]

Hi all, if im seeting up a crypto map between 2 routers or pix's on a WES (lan extension circuit) have the ethernet interfaces got to be on the same ip subnet between them ? does the crypto map use the ip of the physical interface or does it have its own ?

[a.kiprawih]

Hi,

Among other things, the crypto map need to specify Remote Peer IP Address. Same goes to the config on the other side.

This crypto map will later be associated or configured on the outbound interface facing the remote peer interface receiving the VPN Phase I&II sessions.

http://www.cisco.com/en/US/products/ps6350/products_configuration_guide_chapter09186a008049d04c.html#wp1047992

Crypto map can specify static or configured in dynamic mode (no IP specify).

Pls rate helpful post.

Rgds,

AK