VPN Solution - 3002 to IOS

[Cody Ridge]

Hello Everyone,

I am looking for feedback and options for a VPN solution.  The attached diagram illustrates the network layout and what I am trying to accomplish.

I have a client at Site A that needs to establish a VPN tunnel with an outside 3^rd party, located at Site B.  Traffic needs to be passed between hosts on Site A subnet 192.168.8.x and hosts on Site B subnet 192.168.9.x

Site B has a 3002 VPN hardware client to establish a tunnel with Site A

Site A has an Internet facing router with advanced IP services IOS and an ASA ver 8.x protecting internal resources.

The client at Site A would only like to allow VPN tunnels to be established with the router, as opposed to the ASA.

Based on this topology, how can I best create a static VPN tunnel from the 3002 to the router, and allow for the traffic to route to/from the 192.168.8.x subnet at Site A and to/from the 192.168.9.x subnet at Site B?

Any feedback and suggestions would be greatly appreciated.

[Jennifer Halim · Accepted solution]

You can configure the EasyVPN in NEM (Network Extension Mode) between VPN 3002 and IOS router. This will be the only option

supported on VPN3002 to achieve VPN tunnel between VPN3002 and IOS router.

Here is the sample configuration for your reference:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080095106.shtml

Pls also note that VPN3002 is EOL, and here is the EOL notification for your reference:

http://www.cisco.com/en/US/partner/prod/collateral/vpndevc/ps5743/ps5699/ps2286/prod_end-of-life_notice0900aecd805cd557.html