Lan-to-LAN tunnel as a bridge

[mannercorp]

Hi !

I have two ASA 5505 on two different locations(main office and remote office) and I need the remote office to be in the same subnet as the main office since they move computers betweend the offices and they have fixed IP addresses on those computers and they have no right to cahnge to dhcp mode when they move to remore office.

Is it possible to create like a bridge over the VPN tunnel so it extens the LAN ?

/Johan

[mannercorp]

Hi !

Good, or they have to use dixed ip addresses in main office and then change settings when goin to remote office, but that will or course cause other "user" problem.

I must talk to the repsonible people and try to get them use dhcp instead.

/Johan

[svmhome-kiev]

rightly.

[mannercorp]

but would i be possioble to use the original "question"/solution to create the tunnel with ASA in remote office and terminate the "bridged" tunnel in the main office Firewall-1 ? or must it be a ASA in both ends to get the "bridged" scenario to work ?

Of couers this is a question aslo for Firewall-1 - people to answer.

/Johan

[svmhome-kiev]

Which firewall is used in the main office?

better if it is ASA, but you can connect with other vendors. I put together using IPSec ASA, ISR and Microsoft TMG (TMG does not work very stably with third-party equipment, in this case сisсo). I think other vendors have to connect to the ASA. But how they will work hard to say. The best option, if the tunnel will be used by one vendor equipment.