Easy way to transition from VPN 3005 to ASA 5520?

Unanswered Question
Jun 4th, 2009
User Badges:

We're considering replacing a pair of PIX 525s and a pair of VPN 3005s with a single pair of ASA 5520s. I'm looking at the configuration changes that will be needed. The PIX side seems pretty easy... I've run the PIX-to-ASA conversion utility on the config, and it looks like only a few changes are needed. Is there any kind of utility or process like that on the VPN side? I didn't set the VPN 3005s up originally, and it will be a bit of work to set the vpn stuff on the ASA and make sure all features are copied over.


Thanks!


--Steve

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
JORGE RODRIGUEZ Thu, 06/04/2009 - 12:51
User Badges:
  • Green, 3000 points or more

Steve,


Have not come across any VPN3k to ASA conversiont utility, I do not believe there is one. The most you can find is mapping topics between the two platforms as seen in link bellow.


http://www.cisco.com/en/US/docs/security/asa/asa70/vpn3000_upgrade/upgrade/guide/migr_vpn.html


You will have to build what is in vpn3k onto the ASA manually, but you should be able to run both the VPN3k and ASA in parallel and gradually migrate any l2l ipsec tunnels, ra tunnels onto the new ASAs.



Regards


Actions

This Discussion