ASA 5505 DHCP peer detection

[Don Brack]

Hi, I'm running a 5505 with DHCP on the outside interface. All 5505 are connecting to 5545.

Can I configure the ASA for a site to site to automactically discover the the peer address and automatically establish a connection with 5545?

In other words can I configure all settings for the site to site except the peer address. Once connected on network and get outside DHCP, can it also put that address is the peer section of site to site?

[Jouni Forss]

Hi,

You need static WAN interface IP to configure Lan to Lan VPN

You can configure the remote office/site ASAs as Hardware VPN Clients in Network Extension mode.

This basicly lets you put the Client ASAs behind any connection that assings the ASAs outside interface IP with DHCP and they will automatically connect the central office ASA when they got connectivity.

EDIT:

I think this document has some information on the actual configurations (basicly configurations are pretty simple)

http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/ezvpn505.html

I can check some setups tomorrow at work if you need specific configurations.

Please rate if it was helpful

- Jouni