I am about to configure a setup with a VPN network for a company. I will be using a ASA 5520 as the VPN concentrator and Cisco 800 series routers at the remote locations (about 200 remote locations).
Now, if i don't want to configure a tunnel group for each of these remote locations, I can use the "DefaultL2LGroup" tunnel-group on the ASA 5520, to specify a pre-shared-key.
This also works fine, but I'm not so confident with using the same pre-shared-key for all remote locations. So now my question is, whether it's possible to create a tunnel-group for a "group" of remote locations. For example if I wanted to use the same pre-shared-key for the first 10 remote locations, and then another pre-shared-key for the next 10 locations - and so forth - WITHOUT having to specify a tunnel-group for every remote location..
Are there any way to do this?
Thanks in advance...