Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a question that I have not found a definitive answer on, but am hoping someone here can chime in and either point me in the right direction or crush my hopes and dreams.

I have a Cisco ASA 5520 at an office. At a couple remote sites, there are linux boxes functioning as the network gateway/firewall. Is there a way to create a site-to-site VPN from one of those linux boxes to the ASA or will an investment in another ASA be required to achieve this?

share|improve this question
up vote 1 down vote accepted

There are several OpenSource IPsec implementations that allow you to create site-to-site VPNs with Cisco ASA firewalls.

Among them are strongSwan (I'm a developer for that project), Openswan and racoon.

If the ASA is updated to a recent firmware (at least ASA 8.4 seems to be required) you should be able to use IKEv2 together with strongSwan, which makes configuration easier than when using IKEv1.

share|improve this answer
Those all appear to be what I am looking for! It appears I was not using good enough terminology to have these pop up in a Google search. Thanks for a quick response. I'll definitely post back once I get one up and working. – Josh Blair Dec 13 '11 at 17:42

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.