VPN site to site using  2 ASA5505

Posted on 2011-03-09
Last Modified: 2012-05-11
Hello All,
I'm tring to setup a VPN site to site using  2 ASA5505, Please help, here's the config from site A in the attached txt document. Site B is not setup at all as of now. I just want to make sure I have this setup site A setup OK. current-run-config-westbloomfiel.txt
Question by:mdallen8960
  • 2
LVL 35

Accepted Solution

Ernie Beek earned 500 total points
ID: 35093423
Looking good to me.

Just remember when setting up the other side, the access lists you use to 'select' the traffic must be an exact match but the other way around.....

access-list 102 extended permit ip
should be
access-list 102 extended permit ip
at the other end.
If there are more lines, match them all. This will prevent weird issues to happen.
The same goes for the relevant part of the net exempt (nat0 part) of course.
LVL 16

Expert Comment

ID: 35094954

you can review the following sample and use the same configuration:


Author Closing Comment

ID: 35107876
Thanks alot.....
LVL 35

Expert Comment

by:Ernie Beek
ID: 35107887
Glad I could help & thx for the points :)

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

I found an issue or “bug” in the SonicOS platform (the firmware controlling SonicWALL security appliances) that has to do with renaming Default Service Objects, which then causes a portion of the system to become uncontrollable and unstable. BACK…
Envision that you are chipping away at another e-business site with a team of pundit developers and designers. Everything seems, by all accounts, to be going easily.
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question