Chapter 11 Site-to-Site VPN
How Do I...
11-36
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
If you are viewing IKE SA information, you can verify that your VPN connection
is working by verifying that the source and destination IP addresses are correct,
and that the state is “QM_IDLE,” indicating that the connection has been
authenticated and that data transfer can take place.
How Do I Configure a Backup Peer for My VPN?
To configure multiple VPN peers inside a single crypto map:
Step 1 From the left frame, select VPN.
Step 2 From the VPN tree, select VPN Components, and then IPSec Policies.
Step 3 In the IPSec Policies table, click the IPSec policy to which you want to add
another VPN peer.
Step 4 Click Edit.
The Edit IPSec Policy dialog box appears.
Step 5 Click Add.
Step 6 The Add Crypto Map dialog box appears, letting you set the values for the new
crypto map. Set the values for the new crypto map, using all four tabs in the dialog
box. The Peer Information tab contains the Specify Peers field, which lets you
enter the IP address of the peer you want to add.
Step 7 When you have finished, click OK.
The crypto map with the new peer IP address appears in the “Crypto Maps in this
IPSec Policy” table.
Step 8 To add additional peers, repeat Step 4 through Step 8.
How Do I Accommodate Multiple Devices with Different Levels
of VPN Support?
To add multiple transform sets to a single crypto map: