IPSEC Basic Question for you guys
billscott92787
Member Posts: 933
in CCNP
Hey guys,
Since I skipped the ISCW material and went with TSHOOT I've been going through the Train Signal videos and labbing some things out. I wanted to know when doing IPSEC Site-to-Site VPN's after you define the crypto policy at one point you set the peer address. Is this the peer address on your router interface you are defining or the peer address that you are "peering with" on the remote end? I don't have my text books with me so I figured I would just hit the forum up since everyone here is always willing to help someone understand.
Thanks in advanced everyone.
Since I skipped the ISCW material and went with TSHOOT I've been going through the Train Signal videos and labbing some things out. I wanted to know when doing IPSEC Site-to-Site VPN's after you define the crypto policy at one point you set the peer address. Is this the peer address on your router interface you are defining or the peer address that you are "peering with" on the remote end? I don't have my text books with me so I figured I would just hit the forum up since everyone here is always willing to help someone understand.
Thanks in advanced everyone.
Comments
-
burbankmarc
Member Posts: 460
It's the remote end.
You define it in the:
isakmp key KEY address REMOTE-ADRESS
And also in the:
crypto map CRYPTO_MAP ipsec-isakmp
set peer REMOTE-ADDRESS -
billscott92787
Member Posts: 933
Ok sweet man thank you! I figured it was, but I just wanted to double check! Thanks for the quick response!!!