How to configure VRF aware L2L IPSEC VPN with Dynmap ? (dynamic IP addressing on remote site)

[JEROME BOSC]

Hi,

I am trying to setup various L2L IPSEC VPN and map them inside various VRF.

As remote site can have dymamic public IP, I cannot use static crypto mapping but use dynmap.

My problem is how to map L2L VPN to a specific VRF using dynmap ? I can make it work with static satement but not with dynmap.

Do you have any silution ?

[Henrik Grankvist]

Hi

Have you tried using a crypto isakmp profile? At least that is what I've been using to accomplish the same goals.

Example:

crypto dynamic-map dyn1 1
 set transform-set AES256_SHA
 set isakmp-profile CRYPTO-ISAKMP-PROFILE
 match address <CRYPTO-ACL>

crypto isakmp profile CRYPTO-ISAKMP-PROFILE
   vrf <inside vrf>
   keyring <name of keyring>
   self-identity fqdn <hostname of local router>
   match identity host <hostname of remote router> <frontdoor vrf (if any)>