Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi, We're having Dynamic VPN connections to remote sites and planning to change pre-shapred key.I see some configurations about key from the VPN hosting router. (crypto keying and isakmp key)They both are set with the same key. My question is which o...
Hi, I see some IPSec SA show subnet information at the part of local iden and remote ident with show crypto ipsec sa command, but some show 0.0.0.0 like below.There are encry packet counts with the SA.What does 0.0.0.0 mean? local ident (addr/mask/pr...
Hi, Routers have higher OSPF AD value(210) by using distance command under OSPF.And they have IBGP peering and they are redistributing OSPF routes to IBGP(AD 200)I see they keep routes learned from OSPF(AD 210) even if the IBGP AD(200) is lower AD 21...
Hi, We've got high CPU issue with ISR 2911 router.It seems the CPU usage hits high is occurring daily base, possibly during business hours.I guess this comes from old hardware + throughput restriction.The detail about router and others is as below.Ca...
Hi,The vEdge was used to run on the old office and it's moving to the new location so I believe it has already the existingfull configuration including MPLS WAN(vpn1) and LAN setups.We can't connect the Internet link, which is for control connection ...
So do you mean that crypto keying will be used even though the keying is not associated with isakmp profile because it connects to the same VRF?In that case, the key on crypto isakmp key configuration is not in use?
Hi Rob, Does crypto isakmp configuration have VRF option? I guess only crypto keying configuration has only vrf association option. As I mentioned, Dynamic Crypto map doesn't associate with any isakmp profile.So how could Dynamic crypto map can refer...
And, I found that dynamic-map doesn't associate isakmp profile about dynamic key, which is different from Static VPN map.In this case, I guess I just need to change only the key on crypto isakmp key configuration when change the key. > Dynamic crypt...
Hi Rob, Following is more parts of VPN configuration including other VPN connection setup. ======================================================================crypto keyring Static-VPN vrf INTERNETpre-shared-key address x.x.x.112 key static123 cryp...
Hi Rob, Do I need to change the key both crypto keying pre-shared key and crypto iskmp key when I try to change key for Dynamic VPN connection?Or I can change only either crypto keying pre-shared key or crypto isakmp key?
