topic ASA 5510 support ipsec site to site vpn by domain name way ? in Network Security

ASA 5510 support ipsec site to site vpn by domain name way ?

wangyilunwww — Tue, 12 Mar 2019 02:19:48 GMT

dear helper,

my issue :

our side device is Cisco asa 5510 SEC-BUN-K9 with a static ip , and the other side device is cisco RV180

vpn router without static IP (dial-up),

now we plan to establish IPSEC site to site vpn between two sites.

I have confirmed that RV180 support establishing IPSEC site to site vpn with domain name method , However,

I'm not sure whether ASA 5510 also has this feature (means establish IPSEC site to site vpn with domain name

method).

I would be very appreciated to all for the experience sharing

ASA 5510 support ipsec site to site vpn by domain name way ?

Marius Gunnerud — Mon, 05 Aug 2013 07:33:15 GMT

The ASA can support this. You just need configure a dynamic crypto map on the ASA. Just remember that the dynamic crypto map should have the highest sequence number within the crypto map. This is to be sure that the more specific maps are matched first. (I have left out the NAT Exempt statement in the config below)

crypto isakmp policy 10
authentication pre-share
encryption aes
hash sha
group 2

tunnel-group DefaultL2LGroup ipsec-attributes
pre-shared-key

access-list CRYPTO-MAP permit ip 172.16.1.0 255.255.255.0 10.1.100.0 255.255.255.0

crypto ipsec transform-set MY-SET esp-aes esp-sha-hmac
crypto dynamic-map MY-DYNAMIC-MAP 10 set transform-set MY-SET
crypto map outside 100 ipsec-isakmp dynamic MY-DYNAMIC-MAP

crypto map outside 100 match address CRYPTO-MAP
crypto map outside interface outside

crypto isakmp enable outside

tunnel-group DefaultL2LGroup ipsec-attributes

pre-shared-key

ASA 5510 support ipsec site to site vpn by domain name way ?

wangyilunwww — Sat, 10 Aug 2013 08:19:31 GMT

hi Marius,

thank you very much for your help ,i will act to do it .

best regards

wang yi lun