cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
448
Views
0
Helpful
2
Replies
Highlighted
Beginner

Site to site vpn inquiry

Hi,

I am looking to configure a site to site VPN connection between two ASA firewalls.

On one of the firewalls, I have the interface IP as 201.2.171.234, with subnet mask 255.255.255.248, this is the interface i intend to use for the VPN connection.

 

My question is can I use the IP 201.2.171.235 as the peer IP in the VPN configuration since this IP "201.2.171.235" falls under the same subnet of my current interface IP or do I have to use the interface IP; 201.2.171.234, since it's configured on the firewall as the interface IP address.

 

Thank you

 

2 REPLIES 2
Highlighted
VIP Advisor

Re: Site to site vpn inquiry

Hi,

On the ASA you enable ikev1/ikev2 on an interface, once enabled you can only establish a VPN tunnel to the IP address of the interface ikev1/ikev2 is enabled on, not another IP address in that network.

 

HTH

Highlighted
Cisco Employee

Re: Site to site vpn inquiry

Hello Bmak,

 

you would have to use to .234 IP as this is the IP of the interface.

 

Regards

Shikha Grover

PS: Please don't forget to rate and select as validated answer if this answered your question