topic Re: asa-L2L config migration in Expedition Discussions

asa-L2L config migration

chielazo_amcn — Wed, 15 Jul 2020 19:07:24 GMT

Hello Folks,

I'm new to using Expedition Migration Tool and have a question regarding l2l or AnyConnect configuration from my cisco asa firewall. Does Expedition automatically identify and migrate the config of asa l2l or Anyconnect? Trying to play around with it but seems like it's a manual configuration process? Can somebody please confirm this. Thank you.

Please note: I'm trying to migrationg a cisco asa post 8.2 code using the latest Expedition migration tool.

Thank you.

Chie

Re: asa-L2L config migration

lychiang — Wed, 15 Jul 2020 19:36:04 GMT

Hello Chie ,

Not anyconnect configuration, only IPsec site-to-site vpn tunnels configurations.

Re: asa-L2L config migration

chielazo_amcn — Wed, 15 Jul 2020 21:25:29 GMT

Hi Lychiang,

Thanks for your reply. So if I have Anyconnect vpn configuration on the asa I have to manually configure it on the palo firewall right? Also for l2l vpn configuration, does it also migrate the PSK?

Thanks again.

Chie

Re: asa-L2L config migration

lychiang — Wed, 15 Jul 2020 21:46:07 GMT

Chie,

PSK is encrypted , won't be able to migrated automatically . Palo Alto networks use Global Protect as VPN client , migrate from anyconnect to global protect will need to be done manually.