cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
591
Views
0
Helpful
3
Replies

c2s on asa using crypto map

amit bhatnagar
Level 1
Level 1

hello guys ,

i have started managing a asa 5510 firewall which is already having c2s tunnels , the problem i am facing is they are configured as "crypto map"

i have attached sample config . , i am finding it difficult to understand the parameters used in each tunnel as the configration seems bit complex to me ,  if possible can anyone advice how it works .

regards

amit

3 Replies 3

Maykol Rojas
Cisco Employee
Cisco Employee

Amit 

I would be glad to help if you let me know what you mean by c2s.

Mike

Mike

:-) client to site or remorte access vpn , would appreciate help

Ok,

What is it that you are trying to understand or what is that you dont understand about it?

Basically the Group name is going to be extracted from the Tunnel group name you see configured. Then the attributes will be configured on the group-policy (on the router would be like the client configuration group) and on the IPsec attributes on the tunnel group is where you specify the pre-shared key.

The rest is pretty much the same, dynamic crypto maps, the crypto applied on the interface (on global configuration mode not in the interface per-se)

Mike

Mike
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: