Branch Connectivity Design

[edwincharles]

Hello Team,

Need help with designing the Branch connectivity as attached.

Can anyone provide a low budget solution for the above and what is required. like BoM

[Deepak Kumar]

Hi, 

I am not sure, what is network utilization in peak time. I suggest go with Cisco ASA firewall and anyconnect VPN solutions. 

Head Office:

Cisco ASA 5505

Cisco 3850/2960 Switch (24 or 48 ports as per your requirement, But I suggest for 48 Port).

You can configure VPN solution on the firewall so branch users can access application server securely.

Regards,

Deepak Kumar 

[edwincharles]

Thanks deepak,

Do we require static ip on headoffice, or normal DSL internet with dhcp public ip will do for VPN

[Deepak Kumar]

Hi, 

There is no need for fixed IP, you can use it with dynamic IP with DynDNS address. 

DynDNS is available freeware and paid both.

Regards,

Deepak Kumar

[edwincharles]

Hello Deepak,

can you confirm on the below BoM

Part Number	Description
ASA5506-K9	ASA 5506-X with FirePOWER services, 8GE, AC, 3DES/AES
CON-SSSNT-ASA5506K	SOLN SUPP 8X5XNBD ASA 5506-X with FirePOWER services 8GE A
CAB-ACU	AC Power Cord (UK), C13, BS 1363, 2.5m
SF-ASA-K-9.8.2-K8	Cisco ASA 9.8.2 Software image for ASA 5506/5508/5516 series
SF-ASA-FP6.2.2-K9	Cisco FirePOWER Software v6.2.2 for ASA 5500-X
ASA5506-CTRL-LIC	Cisco ASA5506 Control License
AC-VPNO-25	Cisco AnyConnect VPN Only, 25 Simultaneous, ASA Opt (Paper)
CON-ECMUS-ACVA25	SOLN SUPP SWSS Cisco AnyConnect VPN Only, 25 Simultaneous, A
ASA5506-SSD	ASA 5506-X SSD
ASA5500-ENCR-K9	ASA 5500 Strong Encryption License (3DES/AES)
ASA5506-PWR-AC	ASA 5506-X Power Adaptor
WS-C2960X-48TS-L	Catalyst 2960-X 48 GigE, 4 x 1G SFP, LAN Base
CON-SSSNT-WSC248TS	SOLN SUPP 8X5XNBD Catalyst 2960-X 48 GigE 4 x 1G SFP LAN B
CAB-ACU	AC Power Cord (UK), C13, BS 1363, 2.5m

[Deepak Kumar]

Hi,

Everything is looking good. Please verify about a licence "ASA5500-ENCR-K9" is freeware or paid with asa? 

I hope so in the device description you mention that this encryption is includ in the asa.

Regards,

Deepak Kumar 

[edwincharles]

ASA5500-ENCR-K9

its price is zero so its included with ASA

AC-VPNO-25

Cisco AnyConnect VPN Only, 25 Simultaneous, ASA Opt (Paper)

is this license for 25 concurrent anyconnect connection using anyconnect client on desktop

[Deepak Kumar]

Hi,

Yes, only 25 users can connect vpn at a time.

Regards 

Deepak Kumar 

[edwincharles]

Hello ,

does the attached has anyconnect client license

[Deepak Kumar]

Hi, 

Some anyconnect licenses are showing disabled, first make it enable.

Regards,

Deepak Kumar

[edwincharles]

Hello,

does the ANYCONNECT PREMIUM PEERS  2 supports 2 users to connect to VPN