Dynamic IP l2l VPN with Cisco ASA?

Question

To PIX OS and IOS/VPN gurus:I need to configure a LAN-to-LAN VPN with a peer that uses a dynamicIP (a sonicwall in this case).  I am Cisco on our end but cannotfigure out how to tell the Cisco to accept the remote peer  withoutknowing its IP.  I thought we could use a FQDN and DynamicDNS service,but the set peer hostname refers to something you named using "name"-- no good for my needs.The ASA I am testing with is placing the IKE traffic onto theDefaultRAGroup, not the ipsec-l2l group I want to connect with.  I canuse a router if IOS has a way to do this that PIX OS lacks.DO I need to use a CA for this?  If so, can the ASA act as the CA forthe request?Many thanks in advance.Shawn

Shawn Westerhoff · Accepted Answer

Addition: Usually I would use VPNCLIENT command if the remote peer was a Cisco, using parts of EasyVPN. We are using a Soncwall TZ190 as we need the built in Sprint CDMA wireless and I could not find a Cisco device that would do that. We may deploy a Cisco PIX 501 inside the Soncwall LAN and use that with VPNCLIENT but I thought that approach is a bit hardware wasteful.

Shawn

Merv · Answer

dynamic crypto map ?see

Shawn Westerhoff · Answer

The DefaultL2LGroup is not engaging, the inbound connection is usingDefaultRAGroup.Help?

Darren Green · Answer

Shawn,Have a look at this. example above includes both a LAN to LAN VPN betwen a Sonic Walland a PIX + dynamic connection from a Sonic Wall to PIX.Whilst you wanted it to an ASA you should be able to re-work theconfig to fit your needs.RegardsDarren

Dynamic IP l2l VPN with Cisco ASA?

Join the Discussion

Didn't find your answer?