ASA or ISR

acraft · ‎11-14-2007

I need to create an always-on VPN connection between two offices. The main office has a UC500. Is an ASA box the right choice for the remote office, or do I need to go with an ISR?

Collin Clark · ‎11-15-2007

Depends, do you have any other requirements of the device? Things like firewalling, routing, services like Netflow or URL filtering?

ccbootcamp · ‎11-26-2007

Site to Site, nailed down VPN, Cisco recommends the ISR. (or at least my Cisco SE does when we go on customer calls!)

-brad

www.ccbootcamp.com

kplunkett512 · ‎02-20-2008

I highly recommend the ISR. We use 871's for this type of deployment and they work great. If you're hanging phones off of remote site, I've attached a guide provided by TAC for 871 configuration of the IPSec VPN tunnel. You can pick out the pieces that apply for your configuration.

velocitystorm · ‎03-01-2008

Can you repost the guide? I was reading through various posts and found this. I have to do this soon for a customer so it would be a good one to have.

Thanks!

kplunkett512 · ‎03-01-2008

Here you go. Let me know if you have any questions. I can send over a sample config if you have issues getting this going.