Tag Info

New answers tagged

0

Add an SLA monitor Using sla monitor we can have the ASA do a continuous ping over the tunnel to keep it always up. Here’s a config to ping an IP over the tunnel every 5 seconds, forever. sla monitor 1 type echo protocol ipIcmpEcho 10.1.2.2 interface OUTSIDE frequency 5 exit sla monitor schedule 1 life forever start-time now The point of this is ...


0

Yes, you can do it without any problem Here you have a step-by-step guide. It's in spanish but I think that you can understand without problems with Bing translator: http://www.microsofttranslator.com/bv.aspx?from=es&to=en&a=http%3A%2F%2Fenterprise.plainconcepts.com%2F2015%2F04%2Fconectando-microsoft-azure-con-amazon-web-services%2F


0

Yes you can do it. But on the Azure side you have to do all the config via XML files and the cli manually, you cant do it via the WebUI. The cmdlet Set-AzureVNetGatewayKey is your friend :)


-1

Not technically. The only problem I've seen connecting AWS and Azure is that both services prefer to generate the shared key on "their side". I couldn't figure out how to get to the point where the same key was configured on both sides of the tunnel. That was a while ago, so the services/apis might have been updated to allow this by now.


0

As the core firewall ASA 5550 was initially setup with VPN tunnel to Cisco PIX firewall, it must have a cache route. Up on rebooting the core firewall, the issue was fixed. FYI, reseting isamkp sa and ipsec sa didn't resolved the issue.


3

Depends on your budget, but I'd pick up a few Cisco ASA 5505 or 5506-x units at ~$550 each. Industry standard, reasonably easy to configure and no babysitting. If you have dynamic IPs at any of the locations, maybe a Cisco Meraki unit with Auto-VPN functionality. Substitute Cisco with Juniper, Sonicwall, whatever. But I don't advocate homebrew ...


2

It really all boil down on the amount of internet bandwidth you have and how much of it you want be able to use for your VPNs. Even low end firewalls (under 500/600 euros) are capable of 50+ Mb/s of AES128 encrypted bandwidth (es: Sonicwall SOHO serie). For a even lower price (maintaining good performance) you can use Mikrotik's firewall. If easy ...



Top 50 recent answers are included