[c-nsp] IPSec crypto map on MPLS enabled interface?

John Kougoulos koug at intracom.gr
Mon Mar 8 11:47:20 EST 2010



On Mon, 8 Mar 2010, Peter Rathlev wrote:

> crypto isakmp profile Crypto-Profile-TEST
> vrf INSIDE-VRF
> keyring Crypto-Keyring-TEST
> match identity address 172.16.0.1 255.255.255.255 OUTSIDE-VRF
> initiate mode aggressive
> !

not sure, but maybe you should put this profile in vrf OUTSIDE-VRF ?

Regards,
John


More information about the cisco-nsp mailing list