Single remote IP for IPSec router-to-router VPN

[charalambos.papadopoulos]

Hi, I'm setting up a VPN to another company, and they've provided one routable IP address to be both their peer and their local internal system that we need access to.  Can I use the remote peer address in the crypto ACL?  I think they need to provide a second NAT IP for their internal system, otherwise the IPSec traffic from us destined for their peer will hit the crypto ACL.  What do you think?  Thanks!

[Jennifer Halim · Accepted solution]

As long as only 1 end of the peer uses the IPSec peer (terminating ip address) in the crypto ACL, that is OK. You can't have both ends as being the crypto ACL.

[charalambos.papadopoulos]

Thanks, that's what I expected.