Change IP on ASA 5505

[scooter817]

Hi All

I wanted to know if someone can point me in the right direction as how to do below listed question.I'm working with a small shop in my town and they asked me to do this  and i didn't want to do anything until i was for sure i was right in what i was doing.Thanks in advance for all your help and have a great day.

"I need to have the VPN tunnel existing IP addresses changed on the ASA 5505 to the new ones that i have."

[mvsheik123 · Accepted solution]

Hello,

You need to make sure but it sounds like they may be changing the public IP (WAN ip) on their and your ASA 5505 may be terminating the VPN tunnels on the current ip. Ex:

If the WAP ip of Remote office ASA/VPN Conc is : 2.2.2.2

your ASA 5505 Lan-Lan tunnel may have config something similar to...

crypto map 10 match address
crypto map 10 set peer 2.2.2.2 --> Other end IP

crypto map 10 set transform-set

!

tunnel-group 2.2.2.2 type ipsec-l2l
tunnel-group 2.2.2.2 ipsec-attributes
pre-shared-key *
!

Again.. it all depends on what type of tunnel you have.

All you need to do is..

!
no crypto map 10 set peer 2.2.2.2

crypto map 10 set peer 3.3.3.3 --> New IP

!

tunnel-group 3.3.3.3 type ipsec-l2l
tunnel-group 3.3.3.3 ipsec-attributes
pre-shared-key *
!

You need the Pre shared key (or use more system:running config to find the key). The above solution may not be accurate in your scenario.

hth

MS

[scooter817]

You know i just spoke to the end user about the ASA that we are doing tomorrow and yeah it's pretty much just what you said.

they have an MRI machine that needs to talk back to GE and all they want done is to chage out the old IP address for the new ones.

I will let you know how it goes and thanks for your help.