[c-nsp] Changing Peer IP of VPN headend

Michael Malitsky malitsky at netabn.com
Wed Apr 1 11:05:27 EDT 2015


Greetings,

I need to change the public IP of my VPN headend, which will necessitate corresponding Peer IP changes on all N remote peers.  We already have the new IP space, currently configured as a secondary address.  Problem is that N-1 of the peers are completely outside of our control, and scheduling all of them to cut over within a narrow window (one day?) is going to be very challenging to say the least.  Is there a way to cut them over one-by-one, perhaps a way to bind another crypto map to the secondary ip address?  My searching on google and cisco lead me to believe the answer is NO, but I am hoping I missed something.

Router in question is a 2801.  All VPNs are site-to-site IPSEC.

Sincerely,
Michael Malitsky



More information about the cisco-nsp mailing list