Cisco 881 to ASA 5510 Site-to-Site VPN - How to ?
Posted on 2011-09-29
Hello to all Cisco experts
I have few questions regarding VPN tunnels between Cisco 881 and ASA 5510
I am supposed to built few of them with 881 at the branches ends and 5510 at my central location.
The questions I have are mostly in regards with 881 at the branch ends. I got these routers directly from Cisco for a project pilot we are running with them for one of our important customer. Beside the console port the following ports are available on the back panel
A FastEthernet switch with 4 ports (FE0 to FE3)
One FEWAN port marked as FEWAN (FE04 in configuration file)
A virtual LAN VLAN1 which of course does not have a physical port, so my assumption is that the switch ports FE0 to FE3 are part of this VLAN1
All I need is to create VPN tunnels between these routers and my ASA 5510.
Here are my question:
1. It appears that an IP can be assigned to interfaces VLAN1 and FE04 only. I think the VLAN1 is for internal IP an FastEthernet4 for external IP. What is the approach here?
a. Put the DSL modem in bridge mode and assign the external IP to FEWAN FE04 and Interal IP to the VLAN1 interface (this IP will act as gateway for internal subnet)
b. Put the DSL in bridge mode and configure 881 to act as PPPoE client ?
2. Is there a good document how to set this up ?
Thank you for taking the time to read and (hopefully) reply to my question