Lan-2-Lan Tunnel, ASA to 6500 or... What's the best Way to Configure?

[Derek Lee]

I'm trying to implement an L2L tunnel between our office and the data center. Currently we have an ASA 5510 in the office and a 6500 with a Firewall Service Module added on. From what I've read, the FWSM can only vpn tunnel for management. My thought is then to get another ASA and use those to establish the tunnel.

Is this the correct way of doing this, and if so, what is the best location for the ASA? My guess is to put the ASA on a DMZ and set up tunneling there? Or am I completely off on this?

Thanks in advance.

[smalkeric]

This URL provides a sample configuration for the LAN-to-LAN (Site-to-Site) IPsec tunnel between Cisco Security Appliances (ASA/PIX) and the Adaptive Secruity Appliance (ASA) 5505:

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080950890.shtml

[pompeychimes]

If you have one you can also use a router to terminate the VPN.