topic VPN on 5506 in Network Security

VPN on 5506

Richard Langly — Tue, 12 Mar 2019 05:54:29 GMT

Hi, I have an ASA 5506 and I currently use openvpn on my linux box to connect to my VPN service provider (PIA). I know the 5506 does VPN, but there are so many types. I'd like to know if it's possible to configure the 5506 so that it handles the VPN directly (to my VPN provider) and so that I don't need to use the vpn on my boxes to do the tunneling. If so, what method would be used on the 5506 and might there be some examples to work from?

Just so you know how I'm currently using VPN, my current OpenVPN config file looks like:

client
dev tun
proto udp
remote my-vpn-provider.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
tls-client
remote-cert-tls server
auth-user-pass
comp-lzo
verb 1
reneg-sec 0
crl-verify crl.pem

The ASA is not openVPN

Karsten Iwen — Sat, 09 May 2015 11:00:46 GMT

The ASA is not openVPN-compatible. Ask your VPN-provider if they also support IPsec, that's the protocol the ASA can use to connect to other systems as a VPN-client.

Yes, they also support IPSec

Richard Langly — Sun, 10 May 2015 03:44:13 GMT

Yes, they also support IPSec/L2TP. Any pointers on how to do this?

The ASA has a L2TP-Server

Karsten Iwen — Sun, 10 May 2015 07:52:27 GMT

The ASA has a L2TP-Server-function for VPN, but not a client. This won't work as a direct connection from the ASA.