We are going to setup multiple
site-to-site tunnels to our remote office and every tunnel configuration is identical (same hash,encryption etc).
The question is: Do I need to create a separate
isakmp policy for each tunnel or do I just define a single policy and it will share the policy with multiple
crypto map (phase 2) configurations?
I have the following policy:
crypto ikev1 policy 10 authentication pre-share encryption aes hash sha group 2 lifetime 28800
Here is the crypto-map for
crypto ipsec ikev1 transform-set ESP-AES-SHA esp-aes esp-sha-hmac crypto ipsec security-association pmtu-aging infinite crypto map vpn_site0 1 match address ACL_VPN_SITE0 crypto map vpn_site0 1 set pfs crypto map vpn_site0 1 set peer 126.96.36.199 crypto map vpn_site0 1 set ikev1 transform-set ESP-AES-SHA crypto map vpn_site0 1 set security-association lifetime seconds 3600 crypto map avpn_site0 interface outside
Do I need to create an
site1if everything is same? How does
isakmppolicy map with
Can I use the same transform
crypto ipsec ikev1 transform-set ESP-AES-SHA esp-aes esp-sha-hmacfor all of the other sites?