Order of Migration

[dianewalker]

We setup both site-to-site VPN and Remote Access VPN client on VPN 3005 Concentrator.  We want to migrate all the configs to the new ASA 5540.  Do you recommend that we migrate all the configurations for VPN client first before setting up the site-to-site VPN on the ASA or it does not make any difference?  Any other suggestions or recommendations are appreciated.

Please let me know if you need additional information.

Thanks.

Diane

[PAUL GILBERT ARIAS]

You can migrate in any order it doesn't make any impact on the ASA. If you have to minimize the downtime I suggest you to create all the configs on the ASA first and then migrate to the ASA. If possible setup a lab just to avoid any missing details.

I guess Remote Access VPNs are less critical than Lan 2 Lan

[dianewalker]

Thanks Paul for your prompt response.  Is it possible to configure the Site-to-Site first before implementing it into production?

Thanks.

Diane

[andamani]

hi,

i guess you can finish the VPN configuration on the ASA before placing it on production.

Regards,

Anisha

P.S.: please mark this post as answered if you feel your query is resolved. Do rate helpful posts.

[PAUL GILBERT ARIAS]

Yes it ia possible. You can so all the config on the ASA before conecting it to the network.

Sent from Cisco Technical Support iPhone App

[dianewalker]

Thanks all for your prompt response.

When I configure site-to-site VPN in the test environment, is there a way to find out to make sure that there are no errors in site-to-site VPN configurations since I do not have the remote site-to-site VPN?

Thanks.

Diane