|
||
| KB | 0000337 | |
| Dated | 07/10/10 | |
| Revision | 0.01 | |
Configure Cisco EasyVPN With Cisco ASA 5500 |
||
| Problem | ||
Site to site VPN's are great for main office to branch office connections, but for remote workers in a SOHO environment obtaining a static IP address can be expensive and time consuming. Traditionally remote workers will use either AnyConnect or IPSEC Remote VPN's. However Cisco have a system which lets you have a main site (or sites), with a static IP, that acts as the EasyVPN server, then remote sites with dynamic DHCP IP addresses can authenticate and connect via a hardware device. That remote hardware device can be another ASA (Note: Only ASA5505 can be used as an EasyVPN client), or a Cisco IOS router. In addition if you have any old PIX 501 or 506E firewalls laying around they can also be used as EasyVPN clients.
|
||
| Solution | ||
| Step 1 Setup the EasyVPN server at the main site. (Example on ASA5510) | ||
| Step 2 Setup the EasyVPN client at the remote site. (Example on ASA5505) | ||
| Before you start - No other VPN's can be running from this remote device, i.e. ISAKMP cannot be enabled on its outside interface. | ||
If this post helped you, PLEASE take the time to +1 it.
Please be aware, all information is provided free, but it does cost me to have this site hosted, if I've helped you in any way, or saved you some time/cost please take time to make a donation. If you have anything to add to an article, or have an article you would like us to publish please feel free to contact PeteNetLive. (Please be aware I get a LOT of email, I cannot assist and fix everyone's problems, please do not be offended if you do not get a response). |
||
| References - Credits - Or External Links | ||
| NA | ||










