How To Configure VPN on router 2811 through ASA5505

[damiano.milazzo]

Hello everyone

I apologize for the possible triviality of my question. The current configuration of our company sees as suitable for the border, two ASA5505 below which are installed two routers configured with CCME 2811 Express. When the two AS5505 is configured a VPN connection for transmitting data traffic in our network. Given the presence of several public addresses available on both our locations, I was wondering if you could (and if so how) to configure a VPN between two routers 2811, except that when existing data traffic, dedicated exclusively to voice traffic. Ca you give me a document that teach me how can I solve my problem?

Thanks a lot

[Marcin Latosiewicz · Accepted solution]

Damiano,

If you want a separate IPsec VPN for voice traffic only and termination to be done on routers several possibilities exist. Especially if you have IP addresses to spare:

Terminating IPsec VPN on routers.

Terminating GRE over IPsec on routers (gives you more flexibility what and where can be routed, in particular, identifying voice traffic)

Terminating GRE on routers and offloading IPsec to ASAs. (Benefit of the above + ASAs doing encryption).

There is no problem to terminate tunnels through ASA, the only disclaimer is that even in case of static NAT you will most likely need to use NAT-Traversal.

Marcin