IPSec with secondary IP on interface

[tato386]

I have an IOS router with two IPs on one interface. I need to use this interface to establish an IPSec tunnel. I would like to use the primary IP as the crypto endpoint when the router uses its primary IP and the second IP as the endpoint when the router uses the secondary IP to establish a tunnel. Right now the router always uses the primary IP as the endpoint. How can I get the router to automatically use the second IP as endpoint without having to manually change the config?

Thanks,

Diego

[gfullage]

You can't do this. The router will always use the primary IP on the outgoing interface as the IPSec source, unless you use the "cry map local-address ..." command. Even using this command though, you can only define an interface for it to use, and it'll still always use the primary IP address on that interface.

[bluesteel]

as stated by gfullage you can not use the secondary IP

 But, you can use a loopback interface as IPSEC source