From: Mark Lewis (mark@mjlnet.com)
Date: Wed Aug 18 2004 - 16:17:49 GMT-3
I can't think of an instance where you need to apply a crypto map to a
loopback interface off the top of my head. Even if you are using a loopback
interface as the tunnel source for a GRE/IPsec tunnel, you only need to
apply the crypto map to either the tunnel and physical interfaces or just
physical interface (depending on the version of IOS you are running).
Perhaps you are refering to a 'feature' that you have found in a particular
version of IOS :)
Mark
CCIE#6280 / CCSI#21051 / etc.
Author: www.ciscopress.com/1587051044
>From: <joedeleonardo@cox.net>
>Reply-To: <joedeleonardo@cox.net>
>To: <acarswell@nc.rr.com>, <ccielab@groupstudy.com>
>Subject: RE: Applying crypto map...
>Date: Wed, 18 Aug 2004 10:24:34 -0400
>
>Hi,
>
>Yes you can apply it to a tunnel. In fact if you wanted to do IPSec over
GRE you apply it to the tunnel only. If you wanted to do GRE over IPSec
you'd apply it to the tunnel, the loopback and the physical.
>
>You apply it where ever you want to send or receive encrypted traffic
in/out of an interface. That's why you'd put it on a loopback... if you did
something like. Using the loopback for VPN redundancy.
>
>I hope I'm making sense. It's still early yet. :)
>
>Take care,
>
>Joe
>
>
>
>-----Original Message-----
>From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Todd Carswell
>Sent: Wednesday, August 18, 2004 7:02 AM
>To: ccielab@groupstudy.com
>Subject: Applying crypto map...
>
>For IPSec, is it possible to apply a crypto map to a Tunnel
>interface? I've come to the conclusion that you can only apply them to
>physical interfaces.
>
>Can someone confirm? Thx
>
>TC
>
>_______________________________________________________________________
>Please help support GroupStudy by purchasing your study materials from:
>http://shop.groupstudy.com
>
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
>
>_______________________________________________________________________
>Please help support GroupStudy by purchasing your study materials from:
>http://shop.groupstudy.com
>
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Fri Sep 03 2004 - 07:02:45 GMT-3