• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 294
  • Last Modified:

best way to reconfigure ASA 5505 for new Static IP that has VPN's configured

Hi Experts.  Working with a mid size company (3 VPN sites) that is in a process of switching ISP vendors(each site) They are using Cisco ASA 5505 on each end.  One site has a frame relay that will be transfered to VPN. What would be the best way to reconfigure routers for the new ISP.
0
mtryka
Asked:
mtryka
  • 3
  • 2
1 Solution
 
MikeKaneCommented:
No easy way to do this....   It's going to be a hard cutover.   Will you have modem access to the firewall console or some other secondary connection?   Will there be a competent person on the far end?   If not, then you need to build the code and quadruple check it before deploying to the remote ASAs.    

Remote's 1st, update the peer address.  Don't write mem.  
Then local, update peer addresses.  

Then the long wait until the tunnels rebuild.  

If everything comes up, write mem.   If not, then a asa reboot gets you back to the original config for another attempt.  

I've done a few IP changes with no secondary access and its the longest 90 seconds you can experience until the devices come back up....  
0
 
mtrykaAuthor Commented:
All sites\buildings have system that i can logmein to (remotely access ASA console) if that helps.
0
 
MikeKaneCommented:
Sure does take the pressure off.   If something is messed up in the ASA config, you aren't cut off from the console or the ssh....  
0
 
mtrykaAuthor Commented:
If posting ASA Configs would help i would be willing to.  Let me know if that helps.  
0
 
MikeKaneCommented:
Go ahead and post...  but the only thing you really need to do is change the IP address on the outside interface to match the new scheme and then change the peer addresses on each endpoint to match the new HQ outside IP.    

If you have remote access to each console port on all endpoints, then its easy.  

0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now