Support for ASA5506X VPN Tunnel to VPN3020

[Frank Anstoetz]

Hi,

our customer is using an old VPN3020 concentrator in their HQ and several ASA 5505 in branch offices which maintain VPN tunnels to the concentrator. As the 5505 is EoS since 2013 they are looking for an alternative device for new branches which will be able to work with the 3020. We wonder if ASA 5506X would be a supported solution. I couldn't find any reference which states this setup being supported. If it isn't, what would be a supported alternative? (...and replacing the VPN3k is not an option ;-)

Thanks & best regards Frank.

[Kanwaljeet Singh]

Hi Frank,

It should be able to support VPN:

http://www.cisco.com/c/en/us/products/security/asa-5500-series-next-generation-firewalls/models-comparison.html

Regards,

Kanwal

Note: Please mark answers if they are helpful.

[Karsten Iwen · Accepted solution]

The VPN3k uses IKEv1 IPsec which is supported by the ASA 5506.

The ASA 5505 is not yet EOS and also not EOL. For sure the 5506-X is a much better platform, but keeping a security-device (the 3k) that *is* EOL and hasn't seen any updates for years connected to the internet doesn't seem a really brilliant idea ... ;-)

[Frank Anstoetz]

Thanks Karsten, that was the information i was looking for.

Danke FA