Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I want to replace a vpnc client with a Cisco ASA 5505. Is it possible to use the Cisco ASA 5505 running version 8.2(5) as a VPN client (not site-to-site)? If so, please point me to the instructions or an example config. Thanks

Here is the config I used and it works now:

vpnclient server vpn.example.com
vpnclient mode client
vpnclient vpngroup MyGroupName password MyGroupPassword
vpnclient vpnclient username MyUserName password MyUserPassword
vpnclient enable
share|improve this question
    
Why wouldn't you just setup a site to site VPN? That's the proper thing to do. –  Jason Berg Jun 21 '11 at 16:39
    
Why not site-to-site? Passing traffic that's not initiated by the VPN endpoint is the definition of a site-to-site, which I assume you're doing? –  Shane Madden Jun 21 '11 at 16:40
    
I agree a true site-to-site is the ideal solution, however I don't have the option in this case as I only have client credentials. –  joet3ch Jun 21 '11 at 16:46
    
I'm glad you were able to get the EasyVPN working. I recently switched my 5505 to be EasyVPN Clients and my 5520 is the EasyVPN server. It makes a world of difference. Site-to-Site is nice if the remote site has a static IP. If not and the IP address changes then down goes your VPN connection. –  Ruisu Apr 5 '12 at 14:27

1 Answer 1

up vote 3 down vote accepted

It is definitely possible to use ASA 5505 as an Easy VPN Remote. In fact, this is one of Cisco's recommended ways of using 5505s. Here's the document:

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/ezvpn505.html

share|improve this answer
    
Thanks, this worked perfectly! –  joet3ch Jun 21 '11 at 17:33
    
Added the config I used to my question. –  joet3ch Jun 21 '11 at 17:35

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.