Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

How To Configure VPN on router 2811 through ASA5505

Hello everyone

I apologize for the possible triviality of my question. The current configuration of our company sees as suitable for the border, two ASA5505 below which are installed two routers configured with CCME 2811 Express. When the two AS5505 is configured a VPN connection for transmitting data traffic in our network. Given the presence of several public addresses available on both our locations, I was wondering if you could (and if so how) to configure a VPN between two routers 2811, except that when existing data traffic, dedicated exclusively to voice traffic. Ca you give me a document that teach me how can I solve my problem?

Thanks a lot

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: How To Configure VPN on router 2811 through ASA5505

Damiano,

If you want a separate IPsec VPN for voice traffic only and termination to be done on routers several possibilities exist. Especially if you have IP addresses to spare:

Terminating IPsec VPN on routers.

Terminating GRE over IPsec on routers (gives you more flexibility what and where can be routed, in particular, identifying voice traffic)

Terminating GRE on routers and offloading IPsec to ASAs. (Benefit of the above + ASAs doing encryption).

There is no problem to terminate tunnels through ASA, the only disclaimer is that even in case of static NAT you will most likely need to use NAT-Traversal.

Marcin

1 REPLY
Cisco Employee

Re: How To Configure VPN on router 2811 through ASA5505

Damiano,

If you want a separate IPsec VPN for voice traffic only and termination to be done on routers several possibilities exist. Especially if you have IP addresses to spare:

Terminating IPsec VPN on routers.

Terminating GRE over IPsec on routers (gives you more flexibility what and where can be routed, in particular, identifying voice traffic)

Terminating GRE on routers and offloading IPsec to ASAs. (Benefit of the above + ASAs doing encryption).

There is no problem to terminate tunnels through ASA, the only disclaimer is that even in case of static NAT you will most likely need to use NAT-Traversal.

Marcin

1232
Views
0
Helpful
1
Replies
CreatePlease to create content