[cisco-voip] semi OT: Remote user ASA Lan to LAN options

[Voll, Scott]

As far as Voice is concerned is there any reason to go one way or the
other?  IE> fixups

 

Scott

 

________________________________

From: Craig M Staffin [mailto:cmstaffin at ra.rockwell.com] 
Sent: Tuesday, February 06, 2007 11:40 AM
To: Voll, Scott
Cc: cisco-voip at puck.nether.net
Subject: RE: [cisco-voip] semi OT: Remote user ASA Lan to LAN options

 


Depends on size 

PiX last time I worked with them could only terminate a small number of
VPN clients somewhere under 50 if I remember right. 

Whereas the Concentraters can do thousends of connections. 

Craig




"Voll, Scott" <Scott.Voll at wesd.org> 

02/06/2007 01:34 PM 

To

"Craig M Staffin" <cmstaffin at ra.rockwell.com> 

cc

<cisco-voip at puck.nether.net> 

Subject

RE: [cisco-voip] semi OT: Remote user ASA Lan to LAN options

 

 

 




Now my second question is...... is it better to terminate this user on a
VPN Concentrator or on a Pix OS 7.2 if I'm using Easy VPN? 
  
Scott 
  

 

________________________________


From: Craig M Staffin [mailto:cmstaffin at ra.rockwell.com] 
Sent: Tuesday, February 06, 2007 11:24 AM
To: Voll, Scott
Cc: cisco-voip at puck.nether.net; cisco-voip-bounces at puck.nether.net
Subject: Re: [cisco-voip] semi OT: Remote user ASA Lan to LAN options 
  

Scott, 

I would use DMVPN as long as you have a static IP back at the main site.


Easy VPN would also work for a single remote user setup 

This should do what you need to do. 

Craig

"Voll, Scott" <Scott.Voll at wesd.org> 
Sent by: cisco-voip-bounces at puck.nether.net 

02/06/2007 01:19 PM 

 

To

<cisco-voip at puck.nether.net> 

cc

  

Subject

[cisco-voip] semi OT: Remote user ASA Lan to LAN options


  

 

  

 





So we just purchased a ASA5505 for a remote user to connect back to the
main site. 
 
The idea was to do a LAN to LAN IPSEC tunnel.  But since this is Comcast
(cable broadband) and they don't do static IP's I'm trying to figure out
how to go about this.  My second thought is that since we will have a
SCCP IP phone behind it I can do a Dynamic VPN connection and since it's
SCCP then It will be sending keepalives to the CM the VPN connection
will stay up.  Would this be correct? 
 
Does anyone already do this?  What are you doing? 
 
Any other thoughts? 
 
TIA 
 
Scott_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://puck.nether.net/pipermail/cisco-voip/attachments/20070206/3abc93cd/attachment.html