RE: IPSec Hairpin on Cisco 2851.

?

It's not like an asa requiring the "intra" and "inter" interface commands;

With IOS always crypto to crypto as long as both remote subnets are known in the routing table (or via default route) via the crypto map interface;

Simply make crypto map acl entries providing peer1 peer2's subnets and vice versa. They'll figure it out. Of course any routers/firewalls at those sites need to route to their crypto map applied interface and do crypto to get to the other site :)

-----Original Message-----
From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of Adil Pasha
Sent: Friday, September 24, 2010 4:34 PM
To: Cisco certification
Subject: IPSec Hairpin on Cisco 2851.

Just wanted to know if Cisco 2851 supports IPSec Hairpin ?

Could you please let me know if it works and what is the command?

I could not find it.

Adil.

Blogs and organic groups at http://www.ccie.net
Received on Fri Sep 24 2010 - 17:04:58 ART