I need to create a secuencial crypto map on my router? For difference two destinies? ... View more

Hi RJI!   It is not that I can not, I have not yet implemented it, I only had the doubt, but when you say 2500 tunnels do you mean tunnels or sessions? ... View more

Hi!   I Checked and I haven't found information, do you have any idea? ... View more

Hi there!   *100% of permitted/available (WAN) bandwidth. * outside traffic   How can do that? some document for do this?   Regards!     ... View more

So, I just need other interface on router? Or also on the ASA?    Regards!!! ... View more

Because for company standard, new traffic it must be in other tunnel ipsec, but they want use the same link and the same interfaces, so it's impossible do that?   I was thinking if I create new statement in the same ACL for this new VLAN also it could works?    When I'll check the configuration with this command I'll see two local-remote for each vlan?   Router#show crypto ipsec sa peer 172.16.1.1 interface: GigabitEthernet0/0     Crypto map tag: outside_map, local addr 172.17.1.1    protected vrf: (none)    local  ident (addr/mask/prot/port): (10.20.10.0/255.255.255.0/0/0)---------------VLAN 2    remote ident (addr/mask/prot/port): (10.10.10.0/255.255.255.0/0/0)---------------VLAN 2    current_peer 172.16.1.1 port 500      PERMIT, flags={origin_is_acl,}     #pkts encaps: 2024, #pkts encrypt: 2024, #pkts digest: 2024     #pkts decaps: 2015, #pkts decrypt: 2015, #pkts verify: 2015     #pkts compressed: 0, #pkts decompressed: 0     #pkts not compressed: 0, #pkts compr. failed: 0     #pkts not decompressed: 0, #pkts decompress failed: 0     #send errors 26, #recv errors 0   In conclusion I cannot create two security parameters for my case? Because ASA not support it? If I would want to do that I need use new interfaces on the ASA and Router?   Regards! ... View more

Hi there!   You can check this for CCP!   https://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_configuration_professional_express/v3_5/guides/rlsnts/ccp_express_rel_notes.pdf     Regards! ... View more

This is my topology.     In my topology 598 routers comunicating with the same ASA, and I have  " DefaultL2LGroup" on the ASA for two reasons.   1.- Because I have many peers.   2.- Because the IP isn't static.   (This tunnel IPSec already works).  So, in the LAN of the all routers only exist one VLAN, I mean all traffic belong to one VLAN (VLAN2), now I try to divide this traffic in two VLANs (VLAN2) and (VLAN3), but I need to create one tunnel for each vlan, I mean create others security parameters for the "new tunnel" for the VLAN3.   But it must has conditions:   1.-I must use the same link 2.-I must use the same interfaces (Router and ASA).   Now, How can to that? for each tunnel create different security parameters and different keys?   Regards! ... View more

Thanks, so, between my switch and router just I need create the same VLANs in my devices for communicate? I mean, what is the difference if I create on my devices the same VLANs and create int vlan with ip address, and just create VLANs without int vlan with ip address?  Also, my end users must have like as gateway the IP address of the int vlan of router?     Regards!! ... View more