VPN site-to-site - Dynamic ASA to Static SonicWALL

[Phil Williamson]

Need help creating a VPN policy for an ASA with a dynamic pub IP to a SonicWALL with a static pub IP.

When you create an aggressive policy on the SonicWALL it exchanges its Unique Firewall Identifier (UFI defaults to MAC) with the VPN peer. How do I use this with the ASA. The UFI can be any string.

When doing this with a 6.3(5) PIX you just config a dynamic map and let the SonicWALL connect as if it were a software client with no-xauth in IKE.

ASA is 8.0(4) and SonicWALL runs their Enhanced-OS - v4.0.1.3

[andrew.prince]

Have a look at the below config example - see if it helps:-

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008052c9d4.shtml

HTH>