Security Internetworking Experts: Tunnels between ASAs for voice and data

my profile | register | search | faq | forum home

»	Security Internetworking Experts » Security » CCIE Security Lab Forum » Tunnels between ASAs for voice and data

UBBFriend: Email this page to someone!

Author

Topic: Tunnels between ASAs for voice and data

Adam657
Member

Member # 31512

Rate Member

posted May 22, 2012 06:40 AM

Our customer has eight sites. The main site has call manager and every site need to register to the call manager through ASA. We have configured site to site vpn between one of the sites to the main site through ASAs and the tunnel is up. Similarly from the other sites we can configure the tunnel to the Main site using ASAs.
By doing these we can only have connectivity from the sites to the main site but not between the sites.These sites also need to communicate through VPN tunnels.
What would you suggest?How should I go about this.

Posts: 47 | From: New York | Registered: Nov 2011 | IP: Logged

faizanbaiguet
Jr Member

Member # 32387

Rate Member

posted May 22, 2012 09:44 PM

have you tested DMVPN? if you have media between spoke n spoke.

Posts: 11 | From: Pakistan | Registered: May 2012 | IP: Logged

theevilmuffin
I need a life

Member # 23191

Member Rated:

posted May 22, 2012 10:39 PM

I'd personally go with flex spoke-spoke if you want to buy new kit.. ;-)

For the ASA you have to hairpin the traffic in one VPN and then back out (unless you manually setup all 8 devices for meshed vpns).

http://www.cisco.com/en/US/docs/security/asa/asa70/configuration/guide/vpnsysop.html#wp1042114

Posts: 1065 | From: UK | Registered: Sep 2007 | IP: Logged

All times are Eastern Time

Printer-friendly view of this topic