Firepower 2110 between ISR C-921 router site to site vpn

[Lkhagvajav Ganbaatar]

Can i create site to site VPN Firepower 2110 between ISR C-921 router?

What configuration on Firepower and ISR C-921?

Please  guide, manual?

[balaji.bandi]

here is config to be done on FTD :

https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/216276-configure-route-based-site-to-site-vpn-t.html

same config need to replicated other side.

you can use below reference guide : configuring router

https://www.firewall.cx/cisco-technical-knowledgebase/cisco-routers/867-cisco-router-site-to-site-ipsec-vpn.html

[Rob Ingram]

@Lkhagvajav Ganbaatar I assume you are running the FTD image on the 2110, rather than the ASA image?

Best to run a VTI between the firepower 2110 device as a crypto map (Policy Based VPN) is depreciated on newer IOS versions. Here is an example to setup a VTI on FTD image https://integratingit.wordpress.com/2020/12/27/ftd-6-7-route-based-vpn-vti/

Here is an example to setup a VTI on IOS image. https://integratingit.wordpress.com/2016/07/07/configuring-cisco-flexvpn-svti/