aryoba
Premium,MVM
join:2002-08-22
| reply to DocLarge
Re: [Config] Configuring More Than 1 VPN Tunnel (871w)
Multiple policy (for IPSec tunnel Phase 1 establishment) is used usually for encryption method compatibility. As example, one VPN device is VPN tunneling with another using 3DES and with the 3rd device using DES. If all of VPN devices are running the same encryption method, then a single isakmp policy should be sufficient.
On the other hand, multiple crypto map (for the IPSec tunnel Phase 2 establishment) is used specifically for each individual tunnel between two VPN devices.
Example
»www.cisco.com/en/US/products/sw/···78.shtml
The 2nd crypto map for the 2nd tunnel could look something like this
assuming
* all VPN devices are using the same encryption method for both Phase 1 and Phase 2
* the 3rd VPN device is in front of 172.16.3.0/24 network |
