Site-to-site VPN on ASA 5510 and 5505

[Shaikhu123_2]

Dear All,

I want to configure site-to-site VPN our head office and branch office to allow access on a business application to branch users. Both the branch and head offices are running same private IP addresses which I doubt should be changed. I have gone through the following document and wanted to know there is anything else required setting it up properly or it can be done by this wizard. I also want to know with which device I should start.

http://www.cisco.com/en/US/docs/security/asa/asa80/getting_started/asa5500/quick/guide/sitvpn.html#wp1044090

Thank you.

[Federico Coto Fajardo]

Hi,

If you have access to both ASAs is easier.

You basically want to make sure that all the VPN parameters match on both sides as well the interesting (VPN) traffic.

If both private subnets are different, no worries.. if they are the same range you must NAT.

You can start on either side and I believe ASDM can generate a mirror of the configuration which you can use on the other side.

Federico.