1cmerchant Fri, 08/29/2008 - 10:01

I am on the starting stages of this process myself, ie replacing an aging 3005 series concentrator with an ASA. Unfortunately the only way to do it is dig in and create the configuration on the ASA device from scratch. Good old fashioned elbow (or brain?) grease and some patience seem to be the best tools.

OK, Here's the link your Cisco team will need. You must have full access to CCO to be allowed to use it (End User access is not allowed).


It is known as the VPN 3000 to ASA 5500 Conversion Tool (BETA).

You send a XML version of your VPN 3000 config and your SE will need to wash it through the tool. Takes a few minutes. He then sends back the text file that will be run into your ASA to config your tunnels.

You should edit this text file as it will contain settings that may overwrite some existing (and possibly working) config.


tu2pel Mon, 08/30/2010 - 15:34

Is the tool available thru TAC? or do we have to get it from our local Cisco SEs....

Peter Zsiros Fri, 08/31/2012 - 06:07


Can it be published to cisco.com, please?

I understand it is BETA, it could still go public with a huge disclaimer i think.

By the way...

VPN 3000 concentrators reached their End of Life, End of Support, End of Everything.

Today is the last day to get support.



This Discussion