cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
244
Views
0
Helpful
1
Replies

Implement site to site VPN

harsha senaratna
Beginner
Beginner

hi all,

I need to create two diffrent site to site vpns between two Branch Routers(attached).

I already implemented this with my branch 1. Now I need to implement this with Branch2.

First S2S VPN : HQ Router to Branch 1

Second S2S VPN : HQ Router to Branch2

Is it possible to terminate two branches in HQ Router in following manner?

HQ Router

***********

crypto isakmp policy 2

encr 3des

authentication pre-share

group 2

crypto isakmp key test address 205.1.1.2

crypto isakmp key test address 205.1.1.3

crypto ipsec transform-set test-s2s esp-3des esp-sha-hmac

crypto map test-s2s 5 ipsec-isakmp

set peer 205.1.1.2

set transform-set test-s2s

match address testacl1

crypto map test-s2s 10 ipsec-isakmp

set peer 205.1.1.3

set transform-set test-s2s

match address testacl2

Branch1

*******

crypto isakmp policy 2

encr 3des

authentication pre-share

group 2

crypto isakmp key test address 205.1.1.1

crypto ipsec transform-set test-s2s esp-3des esp-sha-hmac

crypto map test-s2s 5 ipsec-isakmp

set peer 205.1.1.1

set transform-set test-s2s

match address testacl1

Branch2

********

crypto isakmp policy 2

encr 3des

authentication pre-share

group 2

crypto isakmp key test address 205.1.1.1

crypto ipsec transform-set test-s2s esp-3des esp-sha-hmac

crypto map test-s2s 5 ipsec-isakmp

set peer 205.1.1.1

set transform-set test-s2s

match address testacl2

s2s.JPG

1 Reply 1

Yes.. The above config will work...

Thanks / Karuppu

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: