cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Who Me Too'd this topic

How to configure IPSec site-to-site VPN_On one site dual ISP and other site has one ISP

incognito
Level 1
Level 1

HELLO, team

Help me in this question

How to configure IPSec site-to-site VPN? One site (HUB) has dual ISP connection and other site (spoke) has one ISP.

 

In the beginning both HUB site and Spoke site had only one ISP and config looked like this:

crypto isakmp policy 1
encr aes
authentication pre-share
group 2
crypto isakmp key KEY address 212.15.60.100
!
!
crypto ipsec transform-set TRANS-SET-GRE-TUNNEL esp-aes esp-sha-hmac
!
crypto map CRYPTO-MAP 1 ipsec-isakmp
description to R1
set peer 212.15.60.100
set transform-set TRANS-SET-GRE-TUNNEL
match address IPSEC-traffic
!
interface Tunnel1
ip address 10.2.2.2 255.255.255.252
ip mtu 1400
ip tcp adjust-mss 1360
ip ospf mtu-ignore
tunnel source 216.11.45.100
tunnel destination 212.15.60.100
tunnel path-mtu-discovery
crypto map CRYPTO-MAP
!

 

Now we have this topology: One site (HUB) has dual ISP connection and other site (spoke) has one ISP.

 

Thanks in advance!

 

Who Me Too'd this topic