user manual

Chapter 8 Scenario: Site-to-Site VPN Configuration
Implementing the Site-to-Site Scenario
8-2
Cisco ASA 5500 Series Adaptive Security Appliance Getting Started Guide
78-17611-01
Figure 8-1 Network Layout for Site-to-Site VPN Configuration Scenario
Creating a VPN site-to-site deployment such as the one in Figure 8-1 requires you
to configure two adaptive security appliances, one on each side of the connection.
Implementing the Site-to-Site Scenario
This section describes how to configure the adaptive security appliance in a
site-to-site VPN deployment, using example parameters from the remote-access
scenario shown in Figure 8-1.
This section includes the following sections:
• Information to Have Available, page 8-2
• Configuring the Site-to-Site VPN, page 8-3
Information to Have Available
Before you begin the configuration procedure, gather the following information:
• IP address of the remote adaptive security appliance peer
• IP addresses of local hosts and networks permitted to use the tunnel to
communicate with resources on the remote site
• IP addresses of remote hosts and networks permitted to use the tunnel to
communicate with local resources
132066
Security
Appliance 2
Internet
Inside
10.10.10.0
Outside
209.165.200.226
Outside
209.165.200.236
Security
Appliance 1
Site A
Inside
10.20.20.0
Site B