1. Home
  2. Cisco Systems
  3. Before I add in config

Before I add in config

I have a router currently setup to allow my LAN to reach the internet and I'm also setting up easy vpn to allow remote sites to connect to resources within my lan. If I add in the configs to set isakmp policy and ipsec on my public interface (just two on here, inside and outside), would that interfere with my current internet connection or would it be simply ignored until a vpn connection is being made? My first time doing this and guess i'm being a little paranoid... :)

Thanks in advance for any help.

Reply to
psychogenic
Loading thread data ...

isakmp is ignored until needed. Large parts of IPSec configuration are ignored until needed.

However, if you define an IPSec configuration and activate it on an interface, without having defined an access-list of traffic to match (or the access-list is missing) then the router (or PIX) will treat that as indicating that *all* traffic should go over the IPSec connection... breaking everything. So be careful about creating your crypto access-lists!

Reply to
Walter Roberson

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.