Re: crypto isakmp enable on multiple sub-interfaces

Makes sense Ryan!

Yeah, that should work fine (with the nameif and not the int ID). Although
we can get technical and argue if it is really "Load Balancing". But then
again, it would digress us completely from your question, Waseemullah.

On Tue, Apr 5, 2011 at 3:51 PM, waseemullah memon <
waseemullah.memon_at_gmail.com> wrote:

> Hi Sadiq,
>
> I intend to use it like below!
>
> crypto isakmp enable g0/0.100
> crypto isakmp enable g0/0.101
>
> where both of the above sub-interfaces are part of outside network with
> security level 0 and 1.
>
>
>
> On Tue, Apr 5, 2011 at 6:26 PM, Sadiq Yakasai <sadiqtanko_at_gmail.com>wrote:
>
>> On the ASA, this is a global command, isnt it? Not sure how you intend to
>> configure this under a interface config mode?
>>
>> On Tue, Apr 5, 2011 at 3:07 PM, waseemullah memon <
>> waseemullah.memon_at_gmail.com> wrote:
>>
>>> Hi,
>>>
>>> Can we enable crypto isakmp enable command on multiple interfaces
>>> (specially
>>> sub-interfaces), for the sake of load-sharing.
>>>
>>> --
>>> Regards,
>>> Waseem
>>> A society grows great when old men plant trees whose shade they know they
>>> shall never sit in.
>>>
>>>
>>> Blogs and organic groups at http://www.ccie.net
>>>
>>> _______________________________________________________________________
>>> Subscription information may be found at:
>>> http://www.groupstudy.com/list/CCIELab.html
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>
>>
>> --
>> CCIEx2 (R&S|Sec) #19963
>>
>
>
>
> --
> Regards,
> Waseemullah Memon
>
> A society grows great when old men plant trees whose shade they know they
> shall never sit in.
>
>

-- 
CCIEx2 (R&S|Sec) #19963
Blogs and organic groups at http://www.ccie.net