Mikrotik to Cisco ASA IPsec VPN - VION Technology Blog

1 of 6

HOME

Blogging

HOME

ABOUT

CONTACT

Database

NETWORKING

DOWNLOADS

Development

http://www.vionblog.com/mikrotik-to-cisco-asa-ipsec-vpn/

Search this site...

PRIVACY

General

Networking

Telephony

MIKROTIK TO CISCO ASA IPSEC VPN

Mikrotik to Cisco ASA IPsec VPN

269 days ago by Nikola Stojanoski

We needed to setup IPsec VPN for a client with a remote location that already had Cisco ASA. So, here is a Mikrotik to
Cisco ASA IPsec howto.

Tutorial Scenario
Cisco ASA site
WAN: 1.1.1.2/30 (outside)
LAN: 192.168.2.1/24 (inside)

Mikrotik site
WAN: 1.1.1.1/30 (ether1)

YouTube

Twitter

Facebook

RSS

Email

Popular Posts
openerp-server.conf for OpenERP 7 explained

LAN: 192.168.1.1/24 (ether2)

Install OpenERP 7.0 from trunk

Cisco ASA to Mikrotik configuration

Launch the VPN configuration wizard on your Cisco ASA router
Set VPN Tunnel Type as Site-to-Site

Meridian Option 11 Programming Manual

skip-name-resolve to speed up MySQL and avoid
problems
Site-to-Site IPSec VPN using Mikrotik Routers
VirtualBox 4.2 and phpVirtualBox on Debian
Mikrotik to Cisco ASA IPsec VPN
Oracle Instant Client and PHP OCI8 on Debian
Squeeze
OpenERP 7.0 compared to OpenERP 6.1
Zimbra ActiveSync with Z-Push v2

VION Technology Blog

Like
85 people like VION Technology Blog.

Set the Remote Peer IP Address: 1.1.1.1(Mikrotik WAN) and Pre-shared key. Also Tunnel Group Name should be
the Remote Peer IP Address.
Facebook social plugin

6/27/2013 3:46 PM

Mikrotik to Cisco ASA IPsec VPN - VION Technology Blog

2 of 6

http://www.vionblog.com/mikrotik-to-cisco-asa-ipsec-vpn/

Tags
Apache

Aria SOHO ASA Blogging chat Cisco

Debian DHCP Door Phone firewall Full-Text Search

iPECS iPECS-LIK
iPECS-MG ipLDK IPSec
Hunt Group IM

LG-Ericsson memcached

Meridian

Mikrotik Mobile MySQL nginx Nortel NTP

OpenERP Option 11 PBX PC Admin PHP

pidgin

Set the IKE Policy Encryption to 3DES, Authentication to MD5 and DH Group to 2

PostgreSQL Reverse Proxy SIP skip-name-resolve

VPN Webmaster

Skype SSL VirtualBox VoiceMail VoIP

Zimbra

Set the IPsec Encryption to 3DES and Authentication to MD5

6/27/2013 3:46 PM

Mikrotik to Cisco ASA IPsec VPN - VION Technology Blog

3 of 6

http://www.vionblog.com/mikrotik-to-cisco-asa-ipsec-vpn/

Set the Local and Remote Networks

Dont forget to set the IKE Parameters to Identity: Address to avoid connection problems

6/27/2013 3:46 PM

Mikrotik to Cisco ASA IPsec VPN - VION Technology Blog

4 of 6

http://www.vionblog.com/mikrotik-to-cisco-asa-ipsec-vpn/

Mikrotik to Cisco ASA configuration

Create new policy

Create new Peer

Modify the default proposal to accept MD5 as Authentication

6/27/2013 3:46 PM

Mikrotik to Cisco ASA IPsec VPN - VION Technology Blog

5 of 6

http://www.vionblog.com/mikrotik-to-cisco-asa-ipsec-vpn/

Create NAT rule to bypass the traffic that should to trough the tunnel

Move the rule to the top

Now you can connect your branch offices using Mikrotik Routers even if you have Cisco ASAs installed on the other
locations.
Links: Cisco ASA, Mikrotik Routerboard

Tags: ASA, Cisco, IPSec, Mikrotik, VPN

Nikola Stojanoski
System Administrator and Developer. Giving back to the community by blogging about my problems,
solutions and practical howto's.

Related Articles

Setting Mikrotik as IPSec

Concentrator

My Mikrotik Initial Setup

Site-to-Site IPSec VPN

using Mikrotik Routers

4 Responses to Mikrotik to Cisco ASA IPsec VPN

Damjan Momirovski
December 18, 2012 at 11:34 am
Mnogu dobar blog , povekje od korisen :) , bravo za Mrki.
Reply
Reply

6/27/2013 3:46 PM

Mikrotik to Cisco ASA IPsec VPN - VION Technology Blog

6 of 6

http://www.vionblog.com/mikrotik-to-cisco-asa-ipsec-vpn/

patriotmk
February 8, 2013 at 2:29 pm
, , :)
Reply
Reply

Horst Bursik
April 2, 2013 at 1:19 pm
You saved my day thank you! :)
Reply
Reply

Configurations Mikrotik
April 10, 2013 at 12:26 pm
Good post
Reply
Reply

Leave a Reply
Name (Required)
Mail (will not be published) (Required)
Website

71=

2013 VION Technology Blog. All rights reserved.

Bloggers.com

6/27/2013 3:46 PM