Requirements for site-to-site VPN

[sapdhanoa83]

                   Hi,

I have one Cisco ASA 5505 and I want to set up site-to-site VPN between two locations.

Can I use other ASA5505 on remote site for setting up VPN connection or I have to use other cisco device??

[Dinesh Moudgil]

Hi,

You can have Cisco Router or Firewall or other 3rd party devices like Checkpoint devices as well on the other side.

That totally depends on your requirement.

You can also refer following document for configuration assistance:

http://www.cisco.com/en/US/docs/security/pix/pix72/quick/guide/sitvpn_p.html

Hope that helps.

Regards,

Dinesh Moudgil

[sapdhanoa83]

Thanks Dinesh,

I will read that link.

thx,

Sapinder Dhanoa

[sapdhanoa83]

Hi Dinesh,

I have looked cisco small business ISA550 and Cisco 861W Wireless router, are both would be compatible with ASA 5505 at main locaion and other device at remote site??

If I go for remote site also with 2nd ASA 5505, then selection of 2nd ASA will depend upon number of users at remote site going to aaccess VPN?? Please suggest me.

Thanks for your help!

Sapinder

[Jeet Kumar]

Hey if you already have a another ASA 5505 with you nothing better than that. Apart from ASA as dinesh said you said use Any device which supports Ipsec configuration.

Thanks

Jeet Kumar

[sapdhanoa83]

Thnaks Jeet, I will read all deatils and will come back with my conclusions

thx,

Sapinder Dhanoa

[sapdhanoa83]

Hi,

1. Does selection of ASA or Cisco router at remote site depends on how many users at remote site?? and is same applicable for main server site??

2. I have looked cisco small business ISA550 and Cisco 861W Wireless  router, are both would be compatible with ASA 5505 at main locaion and  other device at remote site??

3. I am planning to use two ASA 5505 and I already have one ASA 5505 when I am looking for 2nd I am getting different options depending upon number of users, please advice for this???

Thanks,

Sapinder

[swapneswar panda]

Nothing is hard and fast. Use what ever you have to build a site-to-site VPN.

If you have limited Inside host license/OS  then just change it to unlimited inside host and you are good to go.

Thanks

swap

[Julio Carvajal]

Hello Sap,

1-You should check what the show version states about the IPSec peers (Being the IPSec peers the devices that you will built a VPN tunnel against) not the amout of users.

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_data_sheet0900aecd802930c5.html

2-Any devices that support IPSec will be compatible with the ASSA.

3-VPN between 2 ASAs 5505, that's cool. No problem regarding the amount of users (As far as I know the 10-50 user restriction does not take into consideration IPsec VPN users.)

For more information about Core and Security Networking follow my website at http://laguiadelnetworking.com

Any question contact me at jcarvaja@laguiadelnetworking.com

Cheers,

Julio Carvajal Segura

[sapdhanoa83]

Thanks Julio,

I have decided to use Two ASA 5505.

for configuring ASA using  ASDM: Please advise for this?? how I can get access thorugh ASDM??

I am reading this link: http://www.cisco.com/en/US/products/ps9422/products_configuration_example09186a0080b4ae61.shtml#ND

how this "IP_Address of the interface of ASA that has been configured for ASDM Access", how can I configured ASA for ASDM access??

please advise

thx,

Sap

[sapdhanoa83]

One more thing: how I can access current configuration of alreday installed ASA 5505??

thx,

Sapinder

[Julio Carvajal]

Hello Sap,

Already replied to your email.

For more information about Core and Security Networking follow my website at http://laguiadelnetworking.com

Any question contact me at jcarvaja@laguiadelnetworking.com

Cheers,

Julio Carvajal Segura