cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
740
Views
0
Helpful
1
Replies

VPN3000 to Router IOS using IP negotiated at intf Router

jvulto
Level 1
Level 1

When trying to connect a router which gets its IP address from the provider I dial in to, I want to connect to a VPN3000.

However when configuring LAN-to-LAN the VPN3000 expects me to have a fixed IP address at the router.

It uses this IP address as group name as it seems. With my IP address changing every time I dial in this is not a working solution as the VPN3000 doesn't find the group.

Now the other option could be to configure Remote-access client at the VPN3000 allowing the Router to connect. The router in that case should act as a VPN client but WITH using a Group parameter.

Does anyone know how to overcome the fact that the IOS router is NOT capable of using the Group value?

1 Reply 1

agross
Level 1
Level 1

Use the base group for your remote access LAN-to-LAN, and create groups for all others. I did experience a problem with the latest 3.1 client in the its IKE proposal must be at the top to work properly.

Good luck

Andy Gross

Review Cisco Networking for a $25 gift card