So I'm helping a guy setup a VPN between his ASA5505 and a Cisco 2801 ISR (probably running 12.3 or 12.4 code, not sure, don't have access to it). The 2801 is run by another company but they provided ...

I will be glad to give details if needed, but I'm thinking I don't have to. For phase 2 of negotiating the tunnel, do I have to use the real address of the device or subnet, or can i use a NAT address ...

I have surfaced again after a busy few weeks – and I can finally continue my description of IPsec VPN troubleshooting (sorry about the delay). This time I’ll take a closer look at IKE Phase 1 (main ...