Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a Cisco 1841 configured for VPN connections of two types:

  • Site-to-site for partners' routers (IPSec) — using different crypto isakmp key and crypto map with set peer, set transform-set, match address for every peer (same map name, different sequence numbers). That crypto map name is added to the WAN interface.
  • Client access (PPTP) — using vpdn-group with accept-dialin protocol pptp.

Now, a new partner wants to connect using vpnc client. The latter needs IPSec ID (group name) and IPSec secret in addition to username and password. I guess that IPSec secret is pre-shared key that can be specified in crypto isakmp key on Cisco. But I could not find any VPN tutorials involving groups. Hence, my questions:

  1. How to add IPSec ID (group name) and IPSec secret on Cisco router for vpnc connections? Should I add a new crypto map matching all addresses as well?
  2. Is it possible to add this configuration without breaking the existing setup?

Thank you.

share|improve this question
up vote 1 down vote accepted

It's no different from setting it up for the Cisco VPN Client. Cisco has a great deal of information on their Web site for setting it up. This page is the best example I could find. The part relevant to you is the 2611 configuration. If that doesn't help, their general VPN configuration examples can be found here. Basically, you'll add a dynamic entry to your existing crypto map, and you'll add some additional lines to set up the VPN group. It shouldn't break your existing setup.

Note that they appear to have changed things around on their site again, so you might need to register for guest access (which is free) to view these links.

share|improve this answer
The example seems promising. I will try it on my router next week. – Igor Kuzmitshov May 20 '10 at 12:27

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.