Please Read: Significant Update Planned, Migrating Forum Software This Month

See more
See less

Site-to-site VPN

  • Filter
  • Time
  • Show
Clear All
new posts

  • Site-to-site VPN

    Hi All,

    I am new to this forum and just register myself to get some help from you guys.

    I have Cisco ASA 5510 firewall and I have site-to-site vpn with my headoffice in US with same model of firewall.

    unfortunately I have to change my firewall wan interface IP address for better service.

    If I make this my site-to-site vpn connectivity will goes down.

    I need to find out whether I have to remove site-to-site vpn configuration at my headoffice and reconfigure it or is there any option that I can modify only peer IP address at my headoffice because I am not changing any configuration in my firewall except the wan interface IP address.

    appreciate your help.


  • #2
    Re: Site-to-site VPN

    I would think that just changing the peers address would work for you.

    When you create the crypto map you have to set the peers address.

    On the ASA that is not moving to a new ISP I think you will have to alter the Crypto Map and set the peer address to the new address.

    For example.
    crypto map crypto_map_name 10 set peer

    The 10 and ip address of are just examples so you'll have to change those to whatever would be correct in your environment.

    Hope this points you in the right direction.

    Be sure to backup your config prior to making any changes. Just in case.
    CCA: XenApp 5.0


    • #3
      Re: Site-to-site VPN

      Thanks Bill I will appreciate your help.