Chapter11 Site-to-Site VPN
How Do I...
11-36
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
If you are viewing IKE SA information, you can verify that your VPN connection
is working by verifying that the source and destination IP addresses are correct,
and that the state is “QM_IDLE,” indicating that the connection has been
authenticated and that data transfer can take place.
How Do I Configure a Backup Peer for My VPN?
To configure multiple VPN peers inside a single crypto map:
Step1 From the left frame, select VPN.
Step2 From the VPN tree, select VPN Components, and then IPSec Policies.
Step3 In the IPSec Policies table, click the IPSec policy to which you want to add
another VPN peer.
Step4 Click Edit.
The Edit IPSec Policy dialog box appears.
Step5 Click Add.
Step6 The Add Crypto Map dialog box appears, letting you set the values for the new
crypto map. Set the values for the new crypto map, using all four tabs in the dialog
box. The Peer Information tab contains the Specify Peers field, which lets you
enter the IP address of the peer you want to add.
Step7 When you have finished, click OK.
The crypto map with the new peer IP address appears in the “Crypto Maps in this
IPSec Policy” table.
Step8 To add additional peers, repeat Step 4 through Step 8.
How Do I Accommodate Multiple Devices with Different Levels of VPN Support?
To add multiple transform sets to a single crypto map: