ASA with Multiple dynamic L2L VPN

[battanc]

I have an ASA 5510 as VPN Concentrator, used for about 30 L2L-VPNs.

I need also some L2L-VPN with dynamic remote peer.

While the configuration for a single dyn-VPN is quite simple (as described in several examples), how can I configure the ASA in the case of many dyn-VPNs ?

Basically, all the dyn-VPN should use the same PSK (the one of DefaultL2LGroup).

But using "aggressive mode" on the remote peer, I could use a different PSK for each dyn-VPN:

tunnel-group ABCD ipsec-attributes

pre-shared-key *

Is this configuration correct ?

Best regards

Claudio

[Jouni Forss · Accepted solution]

Hi,

Maybe the solutions provided in the following document might also be an option for you to configure multiple dynamic L2L VPN connections on the ASA

http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a0080bc7d13.shtml

Hope this helps

- Jouni