Solved: Unable to establish site to site vpn between asa 5505 an 5510

hugochengym · ‎10-19-2013

Hi ALL expert

We are now plan to form a site to site IPSec VPN tunnel between ASA 5505 (ASA Version 8.4) and ASA 5510 (ASA Version 8.0) but failure, would you please teach me how to establish it? Any reference guide?

Hugo

Karsten Iwen · ‎10-19-2013

Here are the links to the cisco config-guides:

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/site2sit.html

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/vpn_site2site.html

In addition to VPN you need to look into NAT exemption:

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/cfgnat.html#wp1043541

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/nat_overview.html#wpxref25608

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/nat_rules.html#wp1232160

And lots of examples:

http://www.cisco.com/en/US/products/ps6120/prod_configuration_examples_list.html

--
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

View solution in original post

Karsten Iwen · ‎10-19-2013

Here are the links to the cisco config-guides:

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/site2sit.html

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/vpn_site2site.html

In addition to VPN you need to look into NAT exemption:

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/cfgnat.html#wp1043541

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/nat_overview.html#wpxref25608

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/nat_rules.html#wp1232160

And lots of examples:

http://www.cisco.com/en/US/products/ps6120/prod_configuration_examples_list.html

--
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

hugochengym · ‎10-20-2013

Hi

Followed your reference guide but still cannot establish tunnel

Hugo

hugochengym · ‎10-21-2013

i got error syslog 713902 and 713903, How to fix?

Hugo

hugochengym · ‎10-21-2013

I got the follwoing when i type "sh crypto isakmp sa"

Type : user Role : initiator

Rekey : no State : MM_WAIT_MSG2