Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is it possible to have multiple VPN's between an ASA and other peer and each tunnel have it's own PSK?

For example, crypto map 1 would have PSK "test" and look after traffic between 10.10.10.0/24 and 11.11.11.0/24.

Crypty map 2 would have the same peer, PSK "test2" and look after traficc between 192.168.1.0/24 and 192.168.30.0/24

share|improve this question

1 Answer 1

up vote 1 down vote accepted

Yes. As long as those tunnels are each to their own peers. PSK's are assigned in the tunnel group, so it'd look something like this:

tunnel-group [IP ADDRESS OF TUNNEL 1's PEER] type ipsec-l2l
tunnel-group [IP ADDRESS OF TUNNEL 1's PEER] ipsec-attributes
pre-shared-key test

tunnel-group [IP ADDRESS OF TUNNEL 2's PEER] type ipsec-l2l
tunnel-group [IP ADDRESS OF TUNNEL 2's PEER] ipsec-attributes
pre-shared-key test2

share|improve this answer
    
Thanks. I'll give it a go –  fdf33 Aug 24 '11 at 23:12

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.