[c-nsp] IP sec tunnel , two IPs same interface

Ashe Canvar acanvar at gmail.com
Fri Aug 19 01:42:22 EDT 2005


Hi all,

I need to terminate an GRE/IPsec tunnel on a router with only 2
ethernet interfaces. The inside interface has rfc1918 address and the
external interface has a routable IP. The problem is that I want to
add a second IP to this interface to terminate a different tunnel
(this IP is from a different ISP).

I have tried doing a secondary IP on the same interface but this does
not work. "sho cry isakamp sa" always shows the connection attempt
being made from the primary ip.

Any way around this ? Can i make two sub interfaces be in th same vlan
 and terminate the VPN on these instead of using the secondary ips ?

Thanks!



More information about the cisco-nsp mailing list