Site-to-site IPSec VPN

[fabflorent]

Hello,

I have a Cisco 1911 Router with one outside interface. 

I have all ready configured site-to-site VPN tunnel (With IPSEC) between my site and a partner site.

Now I am asked to configure a second VPN tunnel between my router and our HQ site. (Not a backup link, but another link!) 

Is it possible to maintain the first tunnel and build a second tunnel Ipsec Site-to-site VPN on my router Cisco 1911 ?

If not, whitch design and configurations are recommended ?

I attached the first tunnel configuration on Cisco 1911.

On our HQ Site, we have a MikroTic router...

[Richard Burts · Accepted solution]

Yes it is possible to maintain the first tunnel and to build a second IPsec tunnel for site to site VPN to a second site (HQ in your case) on your 1911 router. You would configure appropriate encryption parameters for the new tunnel similar to what you configured for your first tunnel. The most important thing to understand about building the new site to site VPN is about the crypto map that you use and specify on the outbound interface. An interface can have only a single crypto map applied. So you do not create a new crypto map but you create a new instance in the existing crypto map. You are currently using sequence number 1 in the existing map

crypto map GMT_BZR 1 ipsec-isakmp

 so for the new instance you might use sequence number 10 (or any number you choose)

crypto map GMT_BZR 10 ipsec-isakmp

and then you configure the other security parameters that you need under the new sequence number.

HTH

Rick

[Aditya Ganjoo]

Duplicate post:

https://supportforums.cisco.com/discussion/13335606/vpn-site-site#comment-12181556

Regards,

Aditya

[fabflorent]

Thank you Rick!

[Richard Burts]

You are welcome. I am glad that my explanation was helpful. Thank you for using the rating system to mark this question as answered. This will help other readers in the forum to identify discussions that have helpful information.

HTH

Rick