?
Solved

Cisco ASA VPN setup between static IP host and DHCP IP host

Posted on 2010-03-30
8
Medium Priority
?
732 Views
Last Modified: 2012-05-09
Hello
  I have a Cisco ASA5510 at our main site and I'm trying to setup a Cisco ASA 5505 at my house. The main site has a static IP and my house uses comcast cable. I know there is a way to do this I just couldn't find a good config example. I believe that there is some way to use the ASA as an anywhere connect client to connect to the main ASA? My main ASA already has the anyconnect entries setup and I'm able to use the client on a pc to connect to the network just fine. Any help getting my house Cisco ASA setup properly is appreciated!
0
Comment
Question by:jbla9028
  • 5
  • 3
8 Comments
 
LVL 7

Expert Comment

by:Ilir Mitrushi
ID: 29178946
see if this can help. it may be you'll see some small differences because of os version but the bulk config remains the same
http://cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808a61f4.shtml
0
 
LVL 1

Author Comment

by:jbla9028
ID: 29789166
Thanks. anyone know if the the ASA can act as a easyVPN server?
0
 
LVL 1

Author Comment

by:jbla9028
ID: 30030615
Does anyone know if the ASA can act as a easyVPN server or if there is another way to get an ASA with a DHCP WAN IP to work properly without having to change it everytime an IP address change occurs? I tried this config and it didn't seem to like it.
0
SMB Security Just Got a Layer Stronger

WatchGuard acquires Percipient Networks to extend protection to the DNS layer, further increasing the value of Total Security Suite.  Learn more about what this means for you and how you can improve your security with WatchGuard today!

 
LVL 7

Expert Comment

by:Ilir Mitrushi
ID: 30096740
Do you mean an easy vpn client? asa can do both but as a server it needs a fixed ip i think.
0
 
LVL 1

Author Comment

by:jbla9028
ID: 30215072
I have one ASA 5510 that has a static IP and I have one ASA5505 with a DHCP IP address. I want to be able to establish a tunnel between the two ASAs. whatever way works where I will not have to worry about my DHCP IP address changing and requiring me to reconfigure the tunnel again.
0
 
LVL 7

Accepted Solution

by:
Ilir Mitrushi earned 2000 total points
ID: 30218828
your asa 5510 should be your easy vpn server and your 5505 will be your easy vpn client. here is an config example which you can modify
http://cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808a61f4.shtml
0
 
LVL 1

Author Comment

by:jbla9028
ID: 30748604
Sorry for the delay. I will try this soon and report back
0
 
LVL 1

Author Comment

by:jbla9028
ID: 32338521
OK I finally was able to test this. I was able to get it to work with 2 ASA 5505s and a Cisco 2821 router in between.

The router offered the client ASA a DHCP address and the VPN tunnel was established once the two ASAs with online. I passed a couple GB files between the tunnel to workstations on each end and it seemed to stay up and stable.

I have attached my 3 configs in case anyone needs to try it to see it work who sees this question. Thanks for your help!
configs.zip
0

Featured Post

Will You Be GDPR Compliant by 5/28/2018?

GDPR? That's a regulation for the European Union. But, if you collect data from customers or employees within the EU, then you need to know about GDPR and make sure your organization is compliant by May 2018. Check out our preparation checklist to make sure you're on track today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For months I had no idea how to 'discover' the IP address of the other end of a link (without asking someone who knows), and it drove me batty. Think about it. You can't use Cisco Discovery Protocol (CDP) because it's not implemented on the ASAs.…
If you’re involved with your company’s wide area network (WAN), you’ve probably heard about SD-WANs. They’re the “boy wonder” of networking, ostensibly allowing companies to replace expensive MPLS lines with low-cost Internet access. But, are they …
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses
Course of the Month5 days, 8 hours left to enroll

589 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question