cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
293
Views
0
Helpful
1
Replies

Help with VPN between ASA and cisco 877

whiteford
Level 1
Level 1

Hi, I am trying to move a Cisco 877 that is happily connected to a cisco concentrator over a DSL to our Cisco ASA.

I changed the 877's peer to the ASA and went through the ASA's VPN wizard in the ASDM and the tunnel didn't come up.

I take it the local network is my LAN IP range and the remote network is the LAN IP range of the 877?

The VPN info on the 877 is:

crypto isakmp policy 1

encr aes 256

authentication pre-share

group 5

crypto isakmp key abcdefg address 1.2.3.4

!

!

crypto ipsec transform-set CBSO_T_Set esp-aes 256 esp-sha-hmac

!

crypto map CBSO_Crypto_Map 10 ipsec-isakmp

set peer 1.2.3.4

set transform-set CBSO_T_Set

match address 101

The local IP range of the 877 is 172.19.15.0/24

My IP range on the inside of the ASA is 192.168.80.0/24

The peer IP of the 877 is 4.3.2.1

What should I add to the ASA is CLI or ASDM based on the above?

1 Reply 1

ivillegas
Level 6
Level 6

Make sure that the security and other configuration parameters such as the lifetime matches on both the sides. Also ensure that interesting traffic is allowed properly using access list on both the sides. http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00805e8c80.shtml