Advertising FQDN name through IPSEC VPN HUB & SPOKE

[niterid3r]

Hello folks,

              Does anyone know how to setup a router to advertise FQDN over IPSEC tunnel and what protocol & ports needs to be opened in the VPN ACL.

Help would be really appreciated.

Thanks in advance.

[gurdsing]

Hi,

You can configure Easy VPN on the router that will work as hub and spoke, through which you can send domain value to the spoke router.

You need ESP (protocol 50) or UDP 4500 (NAT-T, if you are being a NAT device) and UDP 500 (isakmp) for VPN to work.

Thanks

Guru.