Scenario 3: Site-to-Site VPN Configuration
Site-to-site VPN (Virtual Private Networking) features provided by the adaptive security appliance
enable businesses to extend their networks across low-cost public Internet connections to business
partners and remote offices worldwide while maintaining their network security. A VPN connection
enables you to send data from one location to another over a secure connection, or "tunnel," first by
authenticating both ends of the connection, and then by automatically encrypting all data sent between
the two sites.
Figure 6 shows an example VPN tunnel between two adaptive security appliances.
Figure 6
Network Layout for Site-to-Site VPN Configuration Scenario
Site A
Site B
ASA security
ASA security
appliance 1
appliance 2
Outside
Outside
Inside
Inside
Internet
209.165.200.226
209.165.200.236
10.20.20.0
10.10.10.0
Creating a VPN site-to-site deployment such as the one in Figure 6 requires you to configure two
adaptive security appliances, one on each side of the connection.
ASDM provides a configuration wizard to guide you through the process of configuring a site-to-site
VPN.
35