Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

ASA with Dynamic Crypto Maps-Full mesh solution-DMVPN?

What is the best way to resolve having so many peers with ASA and non Cisco firewalls. I have a customer with a number of Watchguard and Sonicwall firewalls sites (Up to 10) and we are looking for the best solution to not have to statically enter in every crypto for every peer with a desired mesh topology. There are 4 ASA's and the rest of the sites are Watchguard and Sonicwalls.

Thanks!

Aaron

3 REPLIES
Silver

Re: ASA with Dynamic Crypto Maps-Full mesh solution-DMVPN?

What software version are you using in the ASA boxes ?

New Member

Re: ASA with Dynamic Crypto Maps-Full mesh solution-DMVPN?

7.2.1 is the ASA version

thanks-

Aaron

Silver

Re: ASA with Dynamic Crypto Maps-Full mesh solution-DMVPN?

Not familiar with the sonic or watchguard firewalls. if you can change the identity it sends to a standard username (ie. remotevpnpeers). You can create a tunnel group with that name. Then create a dynamaic crypto map. See Link below.

http://www.cisco.com/en/US/customer/products/ps6120/products_configuration_example09186a00805733df.shtml

Thanks,

Chad

Please rate if this helps!

212
Views
0
Helpful
3
Replies