Solved

Cannot get Dynamic L2L tunnel working with 2 x Cisco ASA 5505

Posted on 2013-01-15
2
616 Views
Last Modified: 2013-01-17
I have a main location with a static IP + ASA 5505, and a second location with a dynamic IP + ASA 5505. I have never done a dynamic tunnel before, so im not sure what i missed. Attached are the scrubbed configs - thx for the help.
Note: There is an IP phone on the Dynamic side that connects to the main office phone system. Now, eventhough the VPN Tunnel is not up, it ONLY works when plugged into the LAN @ the corporate office, OR on the remote network behind the ASA - it will not work from any other internet connection - and im absolutely positive it's connecting via LAN IP and not Public IP, which is strange.
ASA-Corp-office--static-IP-.txt
0
Comment
Question by:mhdcommunications
2 Comments
 
LVL 15

Accepted Solution

by:
max_the_king earned 500 total points
ID: 38786885
Hi,

you need to add the following:

access-list l2l-vpn extended permit ip 192.168.10.0 255.255.255.0 192.168.20.0 255.255.255.0

crypto map dyn-map 10 match address l2l-vpn

on the other side of the tunnel you need to do the "reverse" implementation (assuming your naming convention on vpn config is mirrored, otherwise change accordingly):

access-list l2l-vpn extended permit ip 192.168.20.0 255.255.255.0 192.168.10.0 255.255.255.0

hope this helps
max
crypto map dyn-map 10 match address l2l-vpn
0
 
LVL 1

Author Closing Comment

by:mhdcommunications
ID: 38790456
Also
crypto isakmp enable outside
Thx.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Join & Write a Comment

How to configure Site to Site VPN on a Cisco ASA.     (version: 1.1 - updated August 6, 2009) Index          [Preface]   1.    [Introduction]   2.    [The situation]   3.    [Getting started]   4.    [Interesting traffic]   5.    [NAT0]   6.…
Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now