Remote Worker Kits

[nbourke2000]

Hi,

I have several users now working from home who I want to set up with a kind of "remote worker kit".

For each kit I've purchased an ASA 5505, a Linksys AP and a 9971 IP Phone. At the head office is a cluster of ASA 5520s and a Callmanager 8. I have no ASA management infrastructure.

The two options I'm looking at are either using either Site-to-Site VPN (Difficult given the possibility of dynamic IPs) or Easy VPN remote.

What I'm looking for is guidance, specifically on VPN configuration, remotely managing/monitoring the ASAs and any possible issues others have encountered with similar setups.

[sean_evershed · Accepted solution]

Since you have 5505's Easy VPN would be a good option to consider. See below a guide.

http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/ezvpn505.html

For the phones you need to consider QoS to ensure that the calls get priority on the link. See below:

http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/conns_qos.html

You can monitor the ASA's via SNMP. You need SNMP monitoring software to do this. There are several free Unix SNMP monitoring tools available to do this eg Catci. Otherwise there are several commercial products available:

http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/monitor_snmp.html