Updating Cisco VPN config to add vpnc support
- by Igor Kuzmitshov
I have a Cisco 1841 configured for VPN connections of two types:
Peer-to-peer for partners' routers (IPsec) — using different crypto isakmp key and crypto map with set peer, set transform-set, match address for every peer (same map name, different priorities). That crypto map name is added to the WAN interface.
Client access (PPTP) — using vpdn-group with accept-dialin protocol pptp.
Now, a new partner wants to connect using vpnc client. The latter needs IPSec ID (group name) and IPSec secret in addition to username and password. I guess that IPSec secret is pre-shared key that can be specified in crypto isakmp key on Cisco. But I could not find any VPN tutorials involving groups. Hence, my questions:
How to add IPSec ID (group name) and IPSec secret on Cisco router for vpnc connections? Should I add a new crypto map matching all addresses as well?
Is it possible to add this configuration without breaking the existing setup?
Thank you.