Defining IPSec Peers


For a redundant configuration, you could specify many peers in your crypto map, each with a different IP address:

 
 R1 (config)# crypto map MYMAP 10 ipsec-isakmp R1 (config-crypto-map)# match ip address 122 R1 (config-crypto-map)# set peer 30.200.200.2 R1 (config-crypto-map)# set peer 30.200.201.2 R1 (config-crypto-map)# set peer 30.200.202.2 

In this configuration, R1 would first attempt to create an IPSec session with 30.200.200.2. If this router is unavailable or an error occurs during IKE, then the next router on the list is attempted, which is 30.200.201.2, and so on until an IPSec session is established.



CCSP SECUR Exam Cram 2
CCSP SECUR Exam Cram 2 (642-501)
ISBN: B000MU86IQ
EAN: N/A
Year: 2003
Pages: 291
Authors: Raman Sud

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net