Solved

Cisco Site-to-Site VPN

Posted on 2011-03-14
2
649 Views
Last Modified: 2012-05-11
Just a general question about setting up VPN on Cisco ASA5505.

I haven't setup Cisco vpn's in a long time so I am a little confused.by some of the resources on the internet.

So my question is this.

In my experience when we needed to setup a site-to-site vpn. The VPN pipe itself would be setup similar to a leased line or connection. Which mean having Ip address and routing statements for each end of the pipe.  

But the Cisco easyVPn setup or even the PIX VPN config's I've seen on Cisco site you don't need to do that anymore. Instead of using routing statement the pipes are automatically built and access-lists route the traffic through the pipes.

My question is whether the current method of setting up Site-to-Site VPN is the current standard or should i be looking into building the pipe with routing statements? (at this point my network isn't very complex and only involves 2 sites.)


0
Comment
Question by:shamanxia
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 3

Accepted Solution

by:
vervenetworks earned 250 total points
ID: 35132616
Using the ASDM, you can easily set a Site-2-Site VPN which is what you want.  It is wizard driven, so fairly easy to follow.  Make sure that the ACLs include an allow for each subnet to the other subnet/resource, and then a deny any any.  The wizard will take care of the NAT deny statements.
0
 
LVL 57

Assisted Solution

by:Pete Long
Pete Long earned 250 total points
ID: 35132739
use site to site vpns for sites with static ip addresses http://www.petenetlive.com/KB/Article/0000072.htm
if you have one site with a dynamically assigned ip address THEN use easyvpn http://www.petenetlive.com/KB/Article/0000337.htm

PeteNetLive
0

Featured Post

Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This past year has been one of great growth and performance for OnPage. We have added many features and integrations to the product, making 2016 an awesome year. We see these steps forward as the basis for future growth.
There’s a movement in Information Technology (IT), and while it’s hard to define, it is gaining momentum. Some call it “stream-lined IT;” others call it “thin-model IT.”
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question