migrate configuration from VPN 3000 to ASA

Unanswered Question
Jun 13th, 2008


I planning to migrate my old VPN 3000 users to an FW ASA, do you know if there is a tool to transfer my configuration in a transparent way to my users?

Thank you.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
JORGE RODRIGUEZ Fri, 06/13/2008 - 19:57


Im not aware of any tools available to export local users database from vpn concentrator to ASA applience, however, a good approache in this type of migration scenario is to integrate IAS Radius and authenticate your users through active directory on your ASA when configuring RA, if you have special users that are not part of your AD domain accounts and that require local user account you could create a second RA tunnel for these type of users and have them authenticate through LOCAL users database in ASA. All this can be done transparently meaning you could have the VPN3000 and ASA firewall both running in parallel for RA until the implementation on ASA is complete.




This Discussion