Cisco, Cisco ADSM, ASA 5505

I'm new to cisco products. My company just procure 2 cisco ASA 5505 for site to site VPN between our head office and branch office. I know the subnet mask and ip range for both networks. My problem is how to configure the ASA for site to site connection. Another issue here is that in my head office, there is a sonic firewall that NAT all our traffic across the internet and as it stands i cannot remove it but i have to place my ASA behind the sonicwall. How can i achieve this?
lathealAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Pete LongTechnical ConsultantCommented:
As for the sonicwall you would need to forward ALL VPN Protocols and ports to the ASA inside (your IT will probably say NO when you ask them)
 
Anyway site to site VPNs are easy to set up see my website here http://www.petenetlive.com/Tech/Firewalls/Cisco/s2svpn.htm
 
 
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
lathealAuthor Commented:
Thanks Pete. On my ASA i have this error 'You are authorised to access home and monitoring views' so can go to configuration mode.

For the Sonicwall...Please explain how you want me to forward VPN traffic as am told the ASA should be behind the sonicwall.

Thanks.
0
Pete LongTechnical ConsultantCommented:

VPN Ports through Firewalls
*****For IPSec VPNs*****
UDP 500 ISAKMP
UDP 4500 Nat-Traversal*
Protocol 50 (ESP)
As for your ASDM error are you logging on  with the enable password?
0
How do you know if your security is working?

Protecting your business doesn’t have to mean sifting through endless alerts and notifications. With WatchGuard Total Security Suite, you can feel confident that your business is secure, meaning you can get back to the things that have been sitting on your to-do list.

lathealAuthor Commented:
Yes i login with enable password.
0
lathealAuthor Commented:
Please how do i reset my ASA 5505 to factory default

I have used cisco recommended
config factory-default
login on thru https://192.168.1.1 still requires a password as against cisco blank username and password.

i have another error 'You are authorised to access only home and monitoring views'

With this i cannot run the wizard for site to site vpn.

Any ideas on the way forward for me.
0
Pete LongTechnical ConsultantCommented:
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Routers

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.