cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
338
Views
0
Helpful
2
Replies

Migrate VPN pix configuration to ASA 9.X configuration

fogemarttt
Level 1
Level 1

Hello ALL,

I want to migrate this PIX configuration to my new ASA configuration. 

Any help to translate this ? 

crypto ipsec transform-set myset esp-aes-256 esp-md5-hmac
crypto ipsec transform-set strong-des esp-3des esp-sha-hmac
crypto dynamic-map cisco 4 set transform-set strong-des
crypto map outside_map 7 ipsec-isakmp
crypto map outside_map 7 match address AB
crypto map outside_map 7 set peer 1.1.1.1
crypto map outside_map 7 set transform-set myset
crypto map outside_map 8 ipsec-isakmp
crypto map outside_map 8 match address CD
crypto map outside_map 8 set peer 2.2.2.2
crypto map outside_map 8 set transform-set myset
crypto map outside_map 20 ipsec-isakmp dynamic cisco
crypto map outside_map client authentication locavpnauthx1
crypto map outside_map interface outside
isakmp enable outside
isakmp key ******** address 1.1.1.1 netmask 255.255.255.255
isakmp key ******** address 0.0.0.0 netmask 0.0.0.0
isakmp key ******** address 2.2.2.2 netmask 255.255.255.255
isakmp nat-traversal 20
isakmp policy 1 authentication pre-share
isakmp policy 1 encryption aes-256
isakmp policy 1 hash md5
isakmp policy 1 group 2
isakmp policy 1 lifetime 86400
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption 3des
isakmp policy 10 hash md5
isakmp policy 10 group 2
isakmp policy 10 lifetime 86400
vpngroup oilivpngrpx address-pool Pool1
vpngroup oilivpngrpx dns-server AS31
vpngroup oilivpngrpx wins-server AS31
vpngroup oilivpngrpx default-domain domain.com
vpngroup oilivpngrpx split-tunnel 80
vpngroup oilivpngrpx split-dns domain.com
vpngroup oilivpngrpx idle-time 1800

Regards,

2 Replies 2

rvarelac
Level 7
Level 7

Hello RANDY, the first One is not working. it is obsolete. the second one is not working, My ASA is ASA 5515X and not listed. 

My configuration is on .txt file not else. 

I think my problem is during conversion of VPN and NAT. 

I have two public server not available. it seems nat is not working. I dont know how to do. 

Regards,

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card