remote ipsec vpn

[suthomas1]

Hello,

Our organisation is changing the current two vpn concentrators 3000 running remote ipsec with ASA running 8.4(3). Please help to understand how the conversion can be done from concentrator to ASA. some things like load sharing on concentrator, security levels on ASA etc are difficult to convert.

The same remote ipsec vpn has to run on new ASA.

Please help with inputs or some documents. thanks in advance.

[Jennifer Halim · Accepted solution]

There is unfortunately no direct conversion from VPN Concentrator to ASA version 8.4.3 since VPN Concentrator was purely only terminating VPN, whereas ASA is acting as a Firewall, VPN server, etc etc.

Here is information and configuration guide on load sharing on ASA firewall:

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/vpn_params.html#wp1048834

Here is some migration document for your reference:

http://www.cisco.com/en/US/docs/security/asa/asa70/vpn3000_upgrade/upgrade/guide/migr_vpn.html