vpn cisco to unify

[akapatos]

hello!! i am facing a certain problem.

there was an established vpn site to site between two remote cisco routers. the one cisco router is removed and replaced by a unify router. if i configure the vpn on the unify gui with the same settings as the cisco excisting router will the vpn work?

[Richard Burts]

I am not familiar with the unify router, but assuming that it has support for normal IPsec site to site VPN then I would certainly expect that if you correctly implement the same settings that the VPN should work. IPsec is a standard based set of protocols and is not vendor specific. So a VPN from Cisco to any other vendor should work as long as both peers have similar parameters specified.

HTH

Rick

[Georg Pauwen]

Hello,

which router model are you using (is that UniFi or Unify) ? I cannot find any Unify routers, only Ubiquiti UniFi routers...

[akapatos]

sorry...i ment unifi ubiquiti... :)

[Georg Pauwen]

Hello,

which model (e.g.Security Gateway Pro 4) ?

[akapatos]

unifi sequrity gateway pro 4

[Georg Pauwen]

Hello,

for what it's worth, I found the thread below. I agree with Richard that the settings are industry standard IPSec...so you should be able to get this to work.

https://community.ubnt.com/t5/UniFi-Routing-Switching/Site-to-Site-VPN-to-Cisco-ASA/td-p/1585178

[chuckfraz]

I was able to replace an ASA 5505 with a UniFi USG and retain site-site VPN with another ASA5505.
On ASA505
VPN Wizard via ASDM on ASA5505 "pretty simple procedure so not going to explain".

On USG under Networks -Create new network, name network, select Manual IPsec, enable site to site, add remote subnet
Enter peer and local Wan IP's
Use same pre-shared key as in ASA VPN Wizard
IPsec profile: "Azure static routing"
Under Advanced Options: IKEv1, AES-256, SHA1, DHGroup 2
Un-check PFS and Dynamic routing

[ivo.cerny]