SITE TO SITE VPN ACCESS LIST

[jon_panes24]

Hi Guys,

I want to establish site to site VPN. I am new to VPNs.

I have this network.

10.1.1.1|----ASA---->>Internet<<----ASA----|20.1.1.1

My default permissions would be deny all, what useful access-list can i apply to establish the Phase 1 and 2 of IKE? What other specific per protocol access list can I add to allow access from 10.1.1.1 to 20.1.1.1 and vice versa.

thanks!!

[Deepak Chauhan]

Hi Buddy,

For site to site VPN you need to create interesting traffic access-list.

ASA1 (10.1.1.1)

access-list S2SVPN_Traffic permit ip host 10.1.1.1 host 20.1.1.1

ASA2 (20.1.1.1)
access-list S2SVPN_Traffic permit ip host 20.1.1.1 host 10.1.1.1