Comments on: Site to Site VPN between Cisco ASA and Router

By: BlogAdmin

BlogAdmin — Tue, 11 Dec 2012 05:42:41 +0000

Hi Montiel,

Do you use NAT in your network? The scenario above assumes there is no NAT. If you are on a real network with two sites connected over the Internet, then most probably you will be using NAT and therefore you MUST do NAT exemption for the VPN interesting traffic.

If you need more help let me know. Tell me also the versions on ASA software you are using.

By: Montiel

Montiel — Mon, 10 Dec 2012 20:50:04 +0000

Hi guys, Im working in a L2L between two ASA5505, I got the exact same results(Phase 1 MM_ACTIVE, phase two packets encaps/decaps) but i cant connect from my remote site to my local site, any clue?

By: azam

azam — Thu, 15 Nov 2012 07:06:21 +0000

Thanks
for the great example,how will be configuration going to be if its was in ASA 8.4 and later
please help

By: BlogAdmin

BlogAdmin — Sun, 10 Jun 2012 18:12:42 +0000

AAqil,

First of all, if you have leased line you need to have it converted to ethernet network connectivity in order to connect the ASA interface on it. ASA is only ethernet. If you have two ASA, you just configure a “mirror” configuration on the second ASA and you will be good to go.

By: AAqil

AAqil — Sun, 10 Jun 2012 11:58:59 +0000

Thanks,this is great example how will the configuration be if its to a asa to asa through a leased line connection can you please help

By: KK

KK — Thu, 12 Apr 2012 23:24:01 +0000

This is a great example and the easiest way to understand configuring VPN tunnels.
Really a great job.