I want the dialer in a down state until a user connects then the dialer for that user can come up. When it comes up that would change the routing table to say their subnet is down the dialer rather than out the default gateway. Sent from Cisco Technical Support iPhone App ... View more

The router is configured as a hub VPN sever for my mobiles users. I don't have the option for dynamic routing due to the remote end. Primary connection is ip for mobile users. But if they can't use ip for any reason I want them to come in via Isdn. The hub needs to route ip unless it sees that the remote has come in via Isdn. I have considered a gre tunnel on the Isdn but that's over heads I'd prefer to avoid. Sent from Cisco Technical Support iPhone App ... View more

Cancel that Turns out my 3rd party VPN device althought it claims to packet capture its wan interface. It doesn't. Note to self always use span ports or a hub. Sent from Cisco Technical Support iPhone App ... View more

crypto isakmp policy 2 encr 3des authentication pre-share group 2 lifetime 3600 ! crypto isakmp policy 3 encr 3des hash md5 authentication pre-share group 2 lifetime 3600 crypto isakmp key password address 0.0.0.0 ! ! crypto ipsec transform-set SAL esp-aes 256 esp-md5-hmac mode tunnel ! ! ! crypto map VPN 10 ipsec-isakmp set peer PeerIP set security-association lifetime seconds 28800 set security-association idle-time 86400 set transform-set SAL match address 105 ! ! ! ! ! interface Port-channel1 no ip address hold-queue 150 in ! interface Port-channel1.69 encapsulation dot1Q 69 ip address IPaddrs.2 255.255.255.0 no ip proxy-arp standby 1 ip IPaddrs.1 standby 1 timers 1 4 standby 1 priority 105 standby 1 name VLAN69 crypto map VPN redundancy VLAN69 ! interface Port-channel1.70 encapsulation dot1Q 70 ip address otherNet.2 255.255.255.0 no ip proxy-arp standby 1 ip otherNet.1 standby 1 timers 1 4 standby 1 priority 105 access-list 105 permit ip otherNet.0 0.0.0.255 Branch.0 0.0.0.255 ... View more

Sorry my Spokes tunnel config is: interface Tunnel0 description HO-VPN bandwidth 100 ip address 10.x.250.6 255.255.255.0 no ip redirects ip mtu 1400 ip nhrp authentication password ip nhrp map multicast dynamic ip nhrp map multicast publicIP ip nhrp map 10.x.250.1 publicIP ip nhrp network-id aNumber ip nhrp holdtime 360 ip nhrp nhs 10.x.250.1 zone-member security Zone-TunnelToHO ip ospf network broadcast tunnel source FastEthernet4 tunnel mode gre multipoint tunnel key aNumber tunnel protection ipsec profile protect-gre ... View more