VPN Won't come up since IP Change

[tomas roberton]

Hi,

We have a VPN tunnel between our remote site and HQ.

Our HQ external ip address changed and I have changed the connection profile in the remote site ASA to the new HQ ip address but this doesn't bring the tunnel back up.

I have attached the configs if anybody could take a look and help me out :)

Thanks,

Tom

[Rahul Govindan]

You also have to change the "set peer" command on the crypto map to reflect the new ip address. Right now you have:

crypto map abcmap 1 set peer 81.149.x.x

and

tunnel-group 81.136.x.x type ipsec-l2l

[tomas roberton]

Hi Rahul,

The set peer ip address is correct, the tunnel group one is the old one.

I thought that the tunnel group ip address was just a name ? will this need to be changed ?

Thanks,

Tom

[Rahul Govindan]

Yes, this needs to be changed too as this references the pre-shared key. You would need to create a new one with the name as the new IP address and keep all the settings the same (basically the pre-shared key). You can then delete the old one.