Li,
Due to some VIP compatibility issues in the past, it was necessary to apply
crypto map on physical as well as tunnel interface. In the newer code, it is
not required to apply crypto map on physical interface. You must apply
crypto map on tunnel interface in either case.
Thanks
-Keyur Shah-
CCIE# 4799 (Security; Routing and Switching)
CISSP,ccsa,css1,scsa,scna,mct,mcse,cni,mcne
Hello Computers
"Say Hello to Your Future!"
http://www.hellocomputers.com
Toll-Free: 1.877.794.3556
-----Original Message-----
From: li jun [mailto:liuyang1976@xxxxxxxxxxx]
Sent: Monday, December 02, 2002 8:03 AM
To: security@xxxxxxxxxxxxxx
Subject: IPSEC/GRE backup
dear all,
for hello computer lab topic, when config IPSEC/GRE backup, I crypto map
only on the tunnel interface, it seems the ipsec traffice can go through
the tunnel when backup. but the hello computer answer is crymap on the
tunnel interface and physical interface both. is there any reason for that?
thanks
regs/Yu Chao
_________________________________________________________________
OmSCJ@=gIOWn4s5D5gWSSJ<~O5M3!* MSN Hotmail!# http://www.hotmail.com
