Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
you only create 1 cryptomap but with 2 sequences each sequence with a different access-lists that specify's which packets(addresses) to encrypt and the set peer shows to which address to tunnel them.here is an example :crypto map test 1 ipsec-isakmp ...
the config you want to make will work , just make sure the lopback interface is a routed address, ussually the overload is done on the address of the interface that is connecting to the internet , but this should work too.good luck guy
yes you should redistribute the static into both protocolsthe status you are describing is normal ,when you are configuring redistribution on a router remember the routes that are redistributed are the routes that are in the routing table of a router...
when you are configuring dot1q subinterfaces on a router , the router receives a dot1q tagged frame with a vlan id and then the subinterface with the same vlan id receives it , but what happens if the router receives a regualr frame that isnt tagged ...