Yohannes Tegegne wrote:
In HQ , we have cisco ASA 5520 . there is a data line which supplied by ISP for MPLS-VPN service with branch office. branch offices also have a data line which r supplied by ISP. And now, I want the branch office to access resource from HQ without site to site vpn configuration( because we don't have ASA or any device to configure L2L VPN) . so, I need your help to configure the hq firewall to allow the branch office accessing the resource at hq without any restriction. lets leave the security issue for this matter.
thanks for your kind cooperation.
bless day
HQ ISP branch office
---------------------------------------------------------------------------------------
| |
switch--------cisco ASA 5520 ------data modem----ISP infrastructur (MPLS) ---------data modem -----switch
| |
----------------------------------------------------------------------------------------
Configure another interface on the ASA with appropriate IP addressing (I'd use a /30 for a point-to-point link), set its name to something like "Branch" and its security level equal to your inside link (100), add appropriate routing for any subnets needed to go across the link to the branch office, and then put in a NAT exemption for the subnets concerned, and a security policy which allows any/any between the two interfaces.
Not too difficult.
Cheers.
