I'd like to create multiple ipsec VPNs between 3 routers. Before applying i'd like verification on the config i've written to see if this will work. This is just the configuration on RouterA for the VPNs to RouterB and RouterC.
As you can only apply one cyptomap per interface, I figure with the route map It should be able to handle the traffic for the two routers. Or is there a better way to do this?
RouterA - 1.1.1.1
RouterB - 2.2.2.2
RouterC - 3.3.3.3
RouterA
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
crypto isakmp key RouterB address 2.2.2.2
crypto isakmp key RouterC address 3.3.3.3
crypto isakmp invalid-spi-recovery
crypto isakmp keepalive 10 5 periodic
crypto isakmp nat keepalive 30
!
crypto ipsec security-association lifetime seconds 28800
!
crypto ipsec transform-set AES-SHA esp-aes 256 esp-sha-hmac
!
crypto map outsidemap 20 ipsec-isakmp
set peer 2.2.2.2
set transform-set AES-SHA
match address 222
crypto map outsidemap 30 ipsec-isakmp
set peer 3.3.3.3
set transform-set AES-SHA
match address 333
!
interface GigabitEthernet0/0
description ** Internet **
ip nat outside
crypto map outsidemap
!
interface GigabitEthernet0/1
description ** LAN **
ip address 1.1.1.1 255.255.255.0
ip nat inside
!
ip nat inside source route-map RouterA interface GigabitEthernet0/0 overload
!
access-list 222 permit ip 1.1.1.0 0.0.0.255 2.2.2.0 0.0.0.255
access-list 223 deny ip 1.1.1.0 0.0.0.255 2.2.2.0 0.0.0.255
access-list 223 permit ip 1.1.1.0 0.0.0.255 any
access-list 333 permit ip 1.1.1.0 0.0.0.255 3.3.3.0 0.0.0.255
access-list 334 deny ip 1.1.1.0 0.0.0.255 3.3.3.0 0.0.0.255
access-list 334 permit ip 1.1.1.0 0.0.0.255 any
!
!
route-map RouterA permit 10
match ip address 223 334
