FWSM & IP Sec VPN module configuration

[jeansamarani]

Hi All,

we have a 7609 chassis where we have installed the FWSM module and IPsec VPN module.

we would like to configure a Site to Site VPN.

how do we do that now ?

Below is the VLAN interface

configuration (outside)on the fwsm

interface Vlan601

description INTERNET CONNECTION

nameif INTERNET

security-level 0

ip address x.x.x.x 255.255.255.248 standby x.x.x.x

thanks.

[jeromecandiff]

First be sure that you are not using Security Contexts.

Other than that, the L2L VPn setup is exactly the same as it is on an Pix or an ASA.

Define your isakmp policies, specify the VPN interface, transform set, crypto map, tunnel group, and no nats (if necessary).

You can use this as a guide:

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080950890.shtml