About DaeHeon Kang

DaeHeon Kang · 01-12-2022

Hi, We're having Dynamic VPN connections to remote sites and planning to change pre-shapred key.I see some configurations about key from the VPN hosting router. (crypto keying and isakmp key)They both are set with the same key. My question is which o...

DaeHeon Kang · 12-21-2021

Hi, I see some IPSec SA show subnet information at the part of local iden and remote ident with show crypto ipsec sa command, but some show 0.0.0.0 like below.There are encry packet counts with the SA.What does 0.0.0.0 mean? local ident (addr/mask/pr...

DaeHeon Kang · 12-12-2021

Hi, Routers have higher OSPF AD value(210) by using distance command under OSPF.And they have IBGP peering and they are redistributing OSPF routes to IBGP(AD 200)I see they keep routes learned from OSPF(AD 210) even if the IBGP AD(200) is lower AD 21...

DaeHeon Kang · 11-30-2021

Hi, We've got high CPU issue with ISR 2911 router.It seems the CPU usage hits high is occurring daily base, possibly during business hours.I guess this comes from old hardware + throughput restriction.The detail about router and others is as below.Ca...

DaeHeon Kang · 11-30-2021

Hi,The vEdge was used to run on the old office and it's moving to the new location so I believe it has already the existingfull configuration including MPLS WAN(vpn1) and LAN setups.We can't connect the Internet link, which is for control connection ...

DaeHeon Kang · 01-13-2022

So do you mean that crypto keying will be used even though the keying is not associated with isakmp profile because it connects to the same VRF?In that case, the key on crypto isakmp key configuration is not in use?

DaeHeon Kang · 01-13-2022

Hi Rob, Does crypto isakmp configuration have VRF option? I guess only crypto keying configuration has only vrf association option. As I mentioned, Dynamic Crypto map doesn't associate with any isakmp profile.So how could Dynamic crypto map can refer...

DaeHeon Kang · 01-13-2022

And, I found that dynamic-map doesn't associate isakmp profile about dynamic key, which is different from Static VPN map.In this case, I guess I just need to change only the key on crypto isakmp key configuration when change the key. > Dynamic crypt...

DaeHeon Kang · 01-13-2022

Hi Rob, Following is more parts of VPN configuration including other VPN connection setup. ======================================================================crypto keyring Static-VPN vrf INTERNETpre-shared-key address x.x.x.112 key static123 cryp...

DaeHeon Kang · 01-13-2022

Hi Rob, Do I need to change the key both crypto keying pre-shared key and crypto iskmp key when I try to change key for Dynamic VPN connection?Or I can change only either crypto keying pre-shared key or crypto isakmp key?

Member Since	‎05-10-2010 06:19 PM
Date Last Visited	‎03-23-2022 12:14 AM
Posts	74
Total Helpful Votes Received	15

User Statistics

User Activity

Aksing about VPN preshared key change

Output of show crypto ipsec sa

Path selection between IBGP(AD 200) and OSPF(AD 210)

High CPU issue with ISR 2911 router

Running SD-WAN Edge without control connection

Re: Aksing about VPN preshared key change

Re: Aksing about VPN preshared key change

Re: Aksing about VPN preshared key change

Re: Aksing about VPN preshared key change

Re: Aksing about VPN preshared key change