Showing results for 
Search instead for 
Did you mean: 

SR520 - CCA support for site-to-site VPN

Level 1
Level 1

Hi, does anyone have any idea when a release of CCA will be available that allows the configuration of sit-to-site VPN connections?  CCA Version 2.1(1) allows for monitoring of site-to-site but NOT the creation of the VPN connection??!!!!  (I have just downloaded CCA version 2.2 - it has more pretty icons but still no more functionality.)


Does anyone have any sample configs which incorporate site-to-site vpn connections within a CCA-configured router using zone base firewall and ezvpn server?

9 Replies 9

Steven DiStefano
VIP Alumni
VIP Alumni

multisite manager is available if thats what you want?

Level 1
Level 1

This only works when using two SR520? Correct?


Sorry for the delay Ted, Just saw the thread again.

CCA MSM workes for UC 500's connecting directly to one another (without an SR520 as the firewall router) or with it.

That's great for UC500's - but what about site-to-site VPN connections between two SR520's (the original post!!)??

Has there been any progress with this? I am trying to configure a site to site VPN on an SR520 as well

Great Steve - some pretty pictures with T1 configuration (not used in uk/europe) but still NO site-to-site VPN configuration.  I don't see how this helps with this enquiry at all!!

OK, sorry about that.  I could swear I pasted in pictures of it used for multisite.

So I have an SR520-T1 in front of a UC520 and it is built using the CCA multisite manager.

What can I collect for you to help you get what you want.

If I understand, you want to know that the SR520-T1 can be integrated as part of the multisite (router in front of UC500), correct?


Hi Steve,

There are no UC500, nor voice devices involved.  The installation simply consists of a network of four sites, each with adsl links to the Internet.  The sites required linking in a hub-spoke network, using vpn links.  I had hoped to offer a simple-to-manage ethernet/ethernet device to act as firewall/router/vpn termination device that the Customer could manage through a GUI interface.  The SR-520 looks to fit the bill if the information on is to be believed but in reality, I now have routers with an infantile firewall GUI interface and no GUI ability to configure site-to-site vpn connections.  I have been able to configure the routers to offer all of the required functionality but only by using CLI (and now if CCA is now run it screws up the CLI!!??!!).  This has not offered the Customer - an SMB user (target market??) a simple to manage GUI-based solution.  I would have been far better using either 800/1800 series routers for a CLI interface, or ASA5505s for a GUI interface. (or possibly hardware from an alternative manfacturer!)  The choice to use the sr-520 was made on available information on - live and learn!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: