Multiple IPSEC tunnels on one ISAKMP policy

[togrul.azizli]

Is it possible to create multiple IPSEC tunnels (site-to-site or RemoteAccess) with only one ISAKMP policy? 

[Puneesh Chhabra]

Yes, as long as it matches the peer policies, you do not need multiple ISAKMP policies.

Regards,

Puneesh

If you find the answer helpful, please mark it as correct so others can benefit from the discussion.

[togrul.azizli]

Hi Puneesh

Is isakmp policy IDs or names have to be same on both sides . 

#crypto isakmp policy 100 

Does policy number 100 has to be same on another device or devices?

[Puneesh Chhabra]

This is the isakmp policy sequence number and is only locally significant.

Numbers do not need to match on both ends.

Regards,

Puneesh

If you find the answer helpful, please mark it as correct so others can benefit from the discussion.

[togrul.azizli]

So if in my ASA I created 5 isakmp policies and 10 remote sites or remote vpn users , so they have to search my ASA in order to find isakmp policy that matches their's. Is this correct?

[Puneesh Chhabra]

Yes, they search from top to bottom.

Regards,

Puneesh

If you find the answer helpful, please mark it as correct so others can benefit from the discussion.