03-31-2019 09:36 PM - edited 02-21-2020 09:36 PM
HELLO, team
Help me in this question
How to configure IPSec site-to-site VPN? One site (HUB) has dual ISP connection and other site (spoke) has one ISP.
In the beginning both HUB site and Spoke site had only one ISP and config looked like this:
crypto isakmp policy 1
encr aes
authentication pre-share
group 2
crypto isakmp key KEY address 212.15.60.100
!
!
crypto ipsec transform-set TRANS-SET-GRE-TUNNEL esp-aes esp-sha-hmac
!
crypto map CRYPTO-MAP 1 ipsec-isakmp
description to R1
set peer 212.15.60.100
set transform-set TRANS-SET-GRE-TUNNEL
match address IPSEC-traffic
!
interface Tunnel1
ip address 10.2.2.2 255.255.255.252
ip mtu 1400
ip tcp adjust-mss 1360
ip ospf mtu-ignore
tunnel source 216.11.45.100
tunnel destination 212.15.60.100
tunnel path-mtu-discovery
crypto map CRYPTO-MAP
!
Now we have this topology: One site (HUB) has dual ISP connection and other site (spoke) has one ISP.
Thanks in advance!
Solved! Go to Solution.