IPSEC between Cisco ASR1002 and Juniper SRX.

[leandro roggerone]

Hello everyone,

While trying to setup my ipsec sesion with the devices mentioned above without success, I found that there are differents ways to face the configuration for each device:

On the cisco side, I can do:

a)_Crypto-map based configuration, or

b)_ VTI based configuration.

On the juniper side, there is:

a)Route based tunnel config and,

b)_Policy based tunnel config.

I wonder wich is the better combination? The one that both devices are more compatible.

Also if someone can provide any example to follow would bee great.

Any help would be preciated,

Rgrds,

Leo.

[Michael Muenz]

I dont't know Junipter config, but for Cisco it should be crypto-map, Juniper could be policy based.

Michael

Please rate all helpful posts

[leandro roggerone]

Ciscomax, I already gone on the other direction:

route based on juniper and vti based on cisco , it is working fine,

Thanks for your response.