1

I want to replace a vpnc client with a Cisco ASA 5505. Is it possible to use the Cisco ASA 5505 running version 8.2(5) as a VPN client (not site-to-site)? If so, please point me to the instructions or an example config. Thanks

Here is the config I used and it works now:

vpnclient server vpn.example.com
vpnclient mode client
vpnclient vpngroup MyGroupName password MyGroupPassword
vpnclient vpnclient username MyUserName password MyUserPassword
vpnclient enable
  • Why wouldn't you just setup a site to site VPN? That's the proper thing to do. – Jason Berg Jun 21 '11 at 16:39
  • Why not site-to-site? Passing traffic that's not initiated by the VPN endpoint is the definition of a site-to-site, which I assume you're doing? – Shane Madden Jun 21 '11 at 16:40
  • I agree a true site-to-site is the ideal solution, however I don't have the option in this case as I only have client credentials. – joet3ch Jun 21 '11 at 16:46
  • I'm glad you were able to get the EasyVPN working. I recently switched my 5505 to be EasyVPN Clients and my 5520 is the EasyVPN server. It makes a world of difference. Site-to-Site is nice if the remote site has a static IP. If not and the IP address changes then down goes your VPN connection. – Ruisu Apr 5 '12 at 14:27
3

It is definitely possible to use ASA 5505 as an Easy VPN Remote. In fact, this is one of Cisco's recommended ways of using 5505s. Here's the document:

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/ezvpn505.html

  • Added the config I used to my question. – joet3ch Jun 21 '11 at 17:35

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.