IPSec Site-to-Site VPN Configuration in Packet Tracer

[Heba1]

I am working on a VPN configuration in Packet Tracer, specifically implementing an IPSec site-to-site VPN. The setup involves four edge routers, each with two serial connections, and the goal is to establish a tunnel between each edge router and the others.

However, I am facing a limitation in Packet Tracer where only one crypto map can be applied to each interface. I've tried creating one map with different policies, but we continue to encounter issues with pinging between to initiate the interesting traffic and this only happens with the VPN.

Could anyone please advise if there is a workaround for this limitation in Packet Tracer? Or, if there’s a specific configuration method I may have overlooked, I would greatly appreciate the guidance.

[M02@rt37 · Accepted solution]

Hello @Heba1 

You could configure multiple entries within the same crypto map. Each entry can define a separate peer and access list to specify the "interesting traffic" for different VPN tunnels:

crypto map VPN-MAP 10 ipsec-isakmp
set peer 192.168.1.1
set transform-set TRANSFORM-SET
match address ACL1

crypto map VPN-MAP 20 ipsec-isakmp
set peer 192.168.2.1
set transform-set TRANSFORM-SET
match address ACL2

interface serial 0/0/0
crypto map VPN-MAP

[Flavio Miranda]

@Heba1 

 As far as I know PacketTracer will not support hub and spoke for VPN.  One tunnel will not come UP.

If you check the PacketTracer samples cisco provide within PacketTracer installation, there will no such scenario