Site to Site VPN - MIgrate to new IP

[Mokhalil82]

Hi

We have a site to site VPN with a 3rd party who are planning to change their public IP. 

I want to set our end of the tunnel with their new IP beforehand so when they change their IP, the tunnel to their new IP comes up.

Could I do this by doing the following:

1) Add the new IP as a secondary IP on the existing crypto map

2) Copy the existing tunnel group with the new IP and PSK

Also can this be done in hours, will these changes drop the current VPN?

Thanks

[Bogdan Nita · Accepted solution]

1) Yes you can add a secondary IP to the crypto-map

2) Yes you need to set up a tunnel-group for the new IP, in order to do this you will have to get the pre-shared key. Pre-shared key can be viewed using:

more system:running-config

The tunnel will drop when adding the secondary IP, but will be immediately renegotiate.

HTH

Bogdan

[Mokhalil82]

Thankyou Bogdan for the info