Cisco ASA VPN setup between static IP host and DHCP IP host

Hello
  I have a Cisco ASA5510 at our main site and I'm trying to setup a Cisco ASA 5505 at my house. The main site has a static IP and my house uses comcast cable. I know there is a way to do this I just couldn't find a good config example. I believe that there is some way to use the ASA as an anywhere connect client to connect to the main ASA? My main ASA already has the anyconnect entries setup and I'm able to use the client on a pc to connect to the network just fine. Any help getting my house Cisco ASA setup properly is appreciated!
LVL 1
jbla9028Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Ilir MitrushiIT Infrastructure and Security ArchitectCommented:
see if this can help. it may be you'll see some small differences because of os version but the bulk config remains the same
http://cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808a61f4.shtml
0
jbla9028Author Commented:
Thanks. anyone know if the the ASA can act as a easyVPN server?
0
jbla9028Author Commented:
Does anyone know if the ASA can act as a easyVPN server or if there is another way to get an ASA with a DHCP WAN IP to work properly without having to change it everytime an IP address change occurs? I tried this config and it didn't seem to like it.
0
Introducing the "443 Security Simplified" Podcast

This new podcast puts you inside the minds of leading white-hat hackers and security researchers. Hosts Marc Laliberte and Corey Nachreiner turn complex security concepts into easily understood and actionable insights on the latest cyber security headlines and trends.

Ilir MitrushiIT Infrastructure and Security ArchitectCommented:
Do you mean an easy vpn client? asa can do both but as a server it needs a fixed ip i think.
0
jbla9028Author Commented:
I have one ASA 5510 that has a static IP and I have one ASA5505 with a DHCP IP address. I want to be able to establish a tunnel between the two ASAs. whatever way works where I will not have to worry about my DHCP IP address changing and requiring me to reconfigure the tunnel again.
0
Ilir MitrushiIT Infrastructure and Security ArchitectCommented:
your asa 5510 should be your easy vpn server and your 5505 will be your easy vpn client. here is an config example which you can modify
http://cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808a61f4.shtml
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
jbla9028Author Commented:
Sorry for the delay. I will try this soon and report back
0
jbla9028Author Commented:
OK I finally was able to test this. I was able to get it to work with 2 ASA 5505s and a Cisco 2821 router in between.

The router offered the client ASA a DHCP address and the VPN tunnel was established once the two ASAs with online. I passed a couple GB files between the tunnel to workstations on each end and it seemed to stay up and stable.

I have attached my 3 configs in case anyone needs to try it to see it work who sees this question. Thanks for your help!
configs.zip
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
VPN

From novice to tech pro — start learning today.