New Member
Posts: 12
Registered: ‎06-10-2014
Accepted Solution

Site-to-Site VPN

Can I re-use the ike-group and esp-group for more than one site-to-site peer?  For instance 

site-to-site peer1

ike-group FOO0

esp-group FOO0

 

site-to-site peer2

ike-group FOO0

esp-group FOO0

 

If the phase 1 and phase 2 proposals match can I just use them again rather than declaring another set like FOO1?

 

Thanks in advance.

 

Phil

 

 


Accepted Solutions
SuperUser
Posts: 8,764
Registered: ‎01-05-2012
Kudos: 2323
Solutions: 1165

Re: Site-to-Site VPN

Using the same groups should be ok,and if phase 1 and phase 2 are different, for the peers, you can declare multiple proposal in the same group
Cheers,
jonatha

View solution in original post


All Replies
SuperUser
Posts: 8,764
Registered: ‎01-05-2012
Kudos: 2323
Solutions: 1165

Re: Site-to-Site VPN

Using the same groups should be ok,and if phase 1 and phase 2 are different, for the peers, you can declare multiple proposal in the same group
Cheers,
jonatha

Highlighted
New Member
Posts: 12
Registered: ‎06-10-2014

Re: Site-to-Site VPN

Perfect, thank you very much.  Just seemed redundant to build another set of proposals when they were exactly the same for both site-to-site VPNs.

 

Phil