We have ASA 5500 as a VPN server, then we have several differnt clients:
- remote home users (ompanie's employees) - we decided to use AnnyConect SSL VPN client
- partners - clientless access to web-applications
- several offcies that aere "mobile" - here is my question "what kind of clinet is to use?"
"mobile" office is office that our company isntalls in differnet expositions. Each such office has router 8xx that should provide remote access for several PC and printer. Printer can not create VPN session, this is why we can not use SSL. What is the best VPN solution for such "mobile" office?
Thank you for answer. I looked: both samples described site-to-site VPN with fix ip address as a tunnel end point. Is it exsit some possibility to make configuration for non-fix ip address at the remote site router?
If you have 800 brand routers (or any router for that matter) or Cisco ASA 5505's at your remote site I would recommend using EzVPN instead of site-to-site as using EzVPN will make your configs easier and will support dynamic addressing on your remote sites.
I don't have much knowledge about VPN's so hopefully one of the experts can add to this. From the following links it looks as though you can configure the remote side to have a dynamic IP while keeping the main site as a static IP.
DocumentationCode download linksGoalRequirementLimitationsSupported ISR
and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity
options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in
HA DocumentationCode download linksGoalRequirementLimitationsSupported
ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationCo...
Question I am currently unable to specify "crypto keyring" command when
configuring VPN connection on my cisco 2901 router. The following
licenses have been activated on my router :