watchfuleye
@comcast.net | anyone interested in walking me thru setup 5505 to (3)3002's
Im lost anyone kind enough to walk me thru setting up my asa5505 for my headend or home office as id call it connecting my branch offices with 3002vpn clients |
|
elnino
join:2006-08-27
Akron, OH
| I posted this in the other thread, it should help: »www.cisco.com/en/US/products/ps6···c.shtml\
On the 3002 just goto Configuration | System | Tunneling Protocols | IPSec then fill in the IP address, group, etc. |
|
watchfuleye
@comcast.net
| reply to watchfuleye
I see the configs ets makes some sense what i am not understanding is for my 3002's connecting in to the 5505
i have there group name
username
password thats all fine
but do i need to reference there ip address ranges anywhere in your demo model you reference a ip address pool that is inside the asa5505 when my 3002 from lets say 192.168.200.1 connects where do i need to reference that so the asa knows the subnet etc |
|
watchfuleye
@comcast.net | reply to watchfuleye
When i first setup the asa and try to hook it to my cable modem it keeps telling me the outside interface is setup dhcp i keep trying to change it any ideas where im goin wrong????????? |
|
elnino
join:2006-08-27
Akron, OH
| reply to watchfuleye
Any luck getting the VPN 3002's to connect? Unless you have servers behind the 3002's, there's really no reason to use network extension mode.
If you still need network extension mode, got into Configuration > Policy Mgt > Traffic mgt > PAT and uncheck it. You'll have to change your addresses from 192.168.10.x. When PAT is on, I think you have to use 192.168.10.x and when it's off you have to use to something different. |
|
