site-to-site vpn

[petercinvest]

May I know any cisco software tool required to implement cisco site to site vpn?

[Joseph W. Doherty]

Often site-to-site VPN can be provided by the basic feature set of a Cisco switch (some) or router (most).  Encrypted site-to-site often requires an "upgraded" feature IOS or additional license on a router or a dedicated security device.

[Julio E. Moisa]

Hi

If you are using ASA firewall you need a license. You can check it executing:

show activation-key

[petercinvest]

my question is :

(1) we are using SAN, where do we configure Cisco site to site VPN?, in two router? or in two core switch? or in two ASA firewall? through which command or tool?

(2) in production environment, Do we need to activiate ipsec VPN in site to site VPN configuration ?