Solved

Site-to-Site VPN

Posted on 2013-05-17
7
439 Views
Last Modified: 2013-05-26
Dear Experts,

i want to configure Site to site ipsec vpn with dynamic ip on one end??

Scenario:

Site1(ASA5505 with static ip leased line)
Site2(Cisco2601 with dynamic DSL connection)

I am using already EZVPN connection but every time my cisco2601 router restart, i have to login router and enter "crypto ipsec client ezvpn ..." type commands.

Please help me to confiure Site to Site vpn that one no need to do anything manually after router or ASA restart.

Thanks,
0
Comment
Question by:nainasipra
7 Comments
 
LVL 19

Expert Comment

by:Kash
ID: 39174287
well first thing you need to do is fix the IP address I presume.
0
 
LVL 25

Expert Comment

by:Cyclops3590
ID: 39174484
site to site vpn will work without a static IP (but only on one side), but it forces the dynamic IP side to "dial in" to the other one so it has to initiate the tunnel.

for some reason I'm thinking if you have to re-type the commands again you didn't save the commands.  after you type them all in did you run one of hte following

copy run start
or
wr mem

if you're not saving the running config to the startup config, any changes since last start config save will be lost and you'll have to re-put them back in

edit:  actually you most likely can have both sides be dynamic but it requires the use of DNS and DynDNS auto-registrations then.  I'm not 100% on that though as I've never tried that.
0
 
LVL 93

Expert Comment

by:John Hurst
ID: 39174713
I have site to site tunnels to clients in my home office using a Cisco RV042G router. The clients have static external IP addresses. My IP is dynamic.

There are two ways to do this (excluding upgrading to a static IP).

1. Go with an Internet Supplier that offers stable IP addressing. My IP changes about once every 2 years and I can manage it.

2. Get DynDNS (dyndns.org) for the dynamic location. This presents a static IP to the outside world and allows the site IP to change dynamically. This works as well.

... Thinkpads_User
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:nainasipra
ID: 39176684
Easy VPN:

site1(ASA5505) ------------to-----------Site2(cisco2801)

every time my router restart on site 2, i have to enter following commands:

" Pending XAuth Request, Please enter the
       following command: crypto ipsec client ezvpn xauth

crypto ipsec client ezvpn xauth
Enter Username:
Password:
"
Please help me to configure that my VPN will reconnect automatically after router restart.

thanks,
0
 
LVL 11

Accepted Solution

by:
naderz earned 500 total points
ID: 39176831
You need to have the username and password configured. Can you post a scrubbed copy of the configs?

You should have something like:

crypto ipsec client ezvpn "some_name"
connect auto
group "your_group_name" key mykey
mode client
peer "peer address"
username "name" password "password"
xauth userid mode local
0
 

Author Comment

by:nainasipra
ID: 39177061
on my router config is like this:

crypto ipsec client ezvpn ezvpnvillage
 connect auto
 group DefaultRAGroup key village
 mode network-extension
 peer "my public ip"
 xauth userid mode interactive

i am not using username and password, if i have to use which username password should i use?

thanks
0
 
LVL 11

Expert Comment

by:naderz
ID: 39179447
These should be the steps, if you don't have them:

1. You need to define the username and password on the ASA.

2. On the 2601 use the name and password in 1 under the crypto configs

crypto ipsec client ezvpn ezvpnvillage
 connect auto
 group DefaultRAGroup key village
 mode network-extension
 peer "my public ip"
  name "use username defined on the server" password "use password on defined on the server"
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
VIRL IP adress 3 69
BGP Network restrictions 6 34
Home network with two AP's dropping WiFi connectivity 12 47
Allow IP range in sonicwall 1 16
Hello , This is a short article on how would you go about enabling traceoptions on a Juniper router . Traceoptions are similar to Cisco debug commands but these traceoptions are implemented in Juniper networks router . The following demonstr…
Shadow IT is coming out of the shadows as more businesses are choosing cloud-based applications. It is now a multi-cloud world for most organizations. Simultaneously, most businesses have yet to consolidate with one cloud provider or define an offic…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question