Updating Cisco VPN config to add vpnc support

Posted by Igor Kuzmitshov on Server Fault See other posts from Server Fault or by Igor Kuzmitshov
Published on 2010-04-07T09:58:28Z Indexed on 2010/04/07 10:03 UTC
Read the original article Hit count: 374

Filed under:
|

I have a Cisco 1841 configured for VPN connections of two types:

  • Peer-to-peer for partners' routers (IPsec) — using different crypto isakmp key and crypto map with set peer, set transform-set, match address for every peer (same map name, different priorities). That crypto map name is added to the WAN interface.
  • Client access (PPTP) — using vpdn-group with accept-dialin protocol pptp.

Now, a new partner wants to connect using vpnc client. The latter needs IPSec ID (group name) and IPSec secret in addition to username and password. I guess that IPSec secret is pre-shared key that can be specified in crypto isakmp key on Cisco. But I could not find any VPN tutorials involving groups. Hence, my questions:

  1. How to add IPSec ID (group name) and IPSec secret on Cisco router for vpnc connections? Should I add a new crypto map matching all addresses as well?
  2. Is it possible to add this configuration without breaking the existing setup?

Thank you.

© Server Fault or respective owner

Related posts about cisco

Related posts about vpn