L2L IPSec VPN with aggressive-mode client-endpoint on ASA?

[joaopalmeida]

Hi all!

I have a L2L VPN tunnel configured and working in an 837 router using this config:

crypto isakmp peer address 10.10.10.10

set aggressive-mode password mypassword

set aggressive-mode client-endpoint fqdn 20.20.hu.ui

I need to configure this tunnel in a ASA5510 but after several tests it doesn't work... In the ASA it seems that the tunnel endpoint must also be where the authentication takes place.

Does anyone know if this configuration is possible on the ASA? If so, how should I do it?

Thanks so much for your support.

Best regards,

John

[amritpatek]

Check if the crypto ACL and NAT ACL are configured properly on ASA. Following links may help you

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00805a87f7.shtml

http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00807e0aca.shtml