I need help setting up two VPNs with the same source ip address. I have 2 customers that both have 10.10.10.0/24 network. I setup IVRF and then Natting there ip address on our Head VPN IOS router.
I can only get one up at a time I believe the problem is the ACL is the same. Does anybody have experience with type of design/setup. I really could use some help here or suggestions.
Here is my configuration
!
ip access-list extended VRFA
permit ip 172.16.15.0 0.0.0.255 10.1.1.0 0.0.0.255
ip access-list extended VRFB
permit ip 172.16.15.0 0.0.0.255 10.1.1.0 0.0.0.255
!
crypto isakmp policy 10
encr xxxx
hash xxxx
authentication pre-share
group 2
crypto isakmp profile VRFA
vrf VRFA
keyring CustomerKeys
match identity address xx.xx.xx.xx
crypto isakmp profile VRFB
vrf VRFB
keyring CustomerKeys
match identity address xx.xx.xx.xx
!
!
crypto ipsec transform-set VRFA esp-3des esp-sha-hmac
mode tunnel
crypto ipsec transform-set VRFB esp-3des esp-sha-hmac
mode tunnel
!
crypto map MGRSERVICES_CMAP 11 ipsec-isakmp
set peer XXXXX
set security-association lifetime seconds XXXXX
set transform-set VRFA
set pfs group2
set isakmp-profile VRFA
match address VRFA
crypto map VRFB_CMAP 12 ipsec-isakmp
set peer XXXXX
set security-association lifetime seconds XXXX
set transform-set VRFB
set pfs group2
set isakmp-profile VRFB
match address VRFB
