cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2347
Views
0
Helpful
1
Replies

IKEv1 and IKEv2 in the same crypto-map

RYShibrik
Level 1
Level 1

I am interested the following:
There is Cisco 2901 v 15.4.(3)M4.
There are also some L2L IPSec peers. Some of them use IKEv2 and others use IKEv1.
There is an external interface.
Is it possible to configure crypto-map that contains of mixed IKEv2 and ISAKMP entries?

May someone was faced with this situation?

Roman

1 Reply 1

Michael Muenz
Level 5
Level 5

Hi, 

you can achive this with the ID numbers.

crypto map VPN 10 ipsec-isakmp

ikev1 stuff

crypto map VPN 20 ipsec-isakmp

ikev2 stuff

I have successfully tested EzVPN (server) with IKEv1 and dynamic IKEv2 Site2Site IPSEC (responder only) on a ISR 2901.

Michael Please rate all helpful posts