Options
Crypto Map
Sitting for the ROUTE exam on friday and have run into a question that seems to go either way based on the IOS.
On olders IOS's the crypto map command needs to be on the tunnel and the physical interface
On newer IOS's the crypto map command goes on which interface?
Physical or Tunnel...........Any guidance is greatly appreciated.
On olders IOS's the crypto map command needs to be on the tunnel and the physical interface
On newer IOS's the crypto map command goes on which interface?
Physical or Tunnel...........Any guidance is greatly appreciated.
Comments
-
Options
creamy_stew
Member Posts: 406 ■■■□□□□□□□
Well, a crypto-map should definately go on the physical interface.
I haven't really studied the ISCW well enough, but I seem to recall of somthing like "protection profiles" or similar for GRE tunnels. A crypto map on a virtual tunnel interface which relies on a physical interface which, in turn, may have crypto-map seems like a nightmare, but is certainly possible it has existed:)
I havent dealt with IOS VPNs until 2-3 years ago, though.
