# Can I setup VPN remote access L2TP on the following Cisco ASA

**URL:** <https://forum.networklessons.com/t/can-i-setup-vpn-remote-access-l2tp-on-the-following-cisco-asa/14133>\
**Category:** ASA\
**Created:** [April 15, 2021, 9:40pm UTC](https://forum.networklessons.com/t/can-i-setup-vpn-remote-access-l2tp-on-the-following-cisco-asa/14133 "2021-04-15T21:40:41Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![unitynetworks](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/u/9f8e36/32.png) [@unitynetworks](https://forum.networklessons.com/u/unitynetworks)\
**Post date:** [April 15, 2021, 9:40pm UTC](https://forum.networklessons.com/t/can-i-setup-vpn-remote-access-l2tp-on-the-following-cisco-asa/14133/1 "2021-04-15T21:40:41Z")

</div>

Hi Rene

how are you ??  
I acquired a Cisco ASA recently and wanted to check that I can setup VPN remote access with it with the following spec on the show version.

```
 sho ver

Cisco Adaptive Security Appliance Software Version 9.1(7)12 
Device Manager Version 7.2(1)

Compiled on Thu 08-Dec-16 10:09 by builders
System image file is "disk0:/asa917-12-k8.bin"
Config file at boot was "startup-config"

GLOBE-ASA-FIREWALL up 8 hours 31 mins

Hardware: ASA5520, 2048 MB RAM, CPU Pentium 4 Celeron 2000 MHz,
Internal ATA Compact Flash, 256MB
BIOS Flash M50FW016 @ 0xfff00000, 2048KB

Encryption hardware device : Cisco ASA-55xx on-board accelerator (revision 0x0)
                             Boot microcode : CN1000-MC-BOOT-2.00 
                             SSL/IKE microcode : CNlite-MC-SSLm-PLUS-2.08
                             IPSec microcode : CNlite-MC-IPSECm-MAIN-2.09
                             Number of accelerators: 1

 0: Ext: GigabitEthernet0/0 : address is c84c.75bd.e592, irq 9
 1: Ext: GigabitEthernet0/1 : address is c84c.75bd.e593, irq 9
 2: Ext: GigabitEthernet0/2 : address is c84c.75bd.e594, irq 9
 3: Ext: GigabitEthernet0/3 : address is c84c.75bd.e595, irq 9
 4: Ext: Management0/0 : address is c84c.75bd.e591, irq 11
 5: Int: Internal-Data0/0 : address is 0000.0001.0002, irq 11
 6: Int: Internal-Control0/0 : address is 0000.0001.0001, irq 5

Licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 150 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Enabled perpetual
Security Contexts : 2 perpetual
GTP/GPRS : Disabled perpetual
AnyConnect Premium Peers : 2 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 750 perpetual
Total VPN Peers : 750 perpetual
Shared License : Disabled perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
UC Phone Proxy Sessions : 2 perpetual
Total UC Proxy Sessions : 2 perpetual
Botnet Traffic Filter : Disabled perpetual
Intercompany Media Engine : Disabled perpetual
Cluster : Disabled perpetual

This platform has an ASA 5520 VPN Plus license.

Serial Number: JMX1432L1AF
Running Permanent Activation Key: 0x463fe261 0xccc0af58 0x60e38564 0x9448c8a4 0x46033f85 
Configuration register is 0x1
Configuration last modified by enable_15 at 19:52:42.979 gmt Thu Apr 15 2021
GLOBE-ASA-FIREWALL# 

```

Many Thanks

Simon.

---

<div class="post-metadata">

**Author:** ![lagapidis](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/lagapidis/32/4949_2.png) [@lagapidis](https://forum.networklessons.com/u/lagapidis)\
**Post date:** [April 18, 2021, 9:32am UTC](https://forum.networklessons.com/t/can-i-setup-vpn-remote-access-l2tp-on-the-following-cisco-asa/14133/2 "2021-04-18T09:32:01Z")

</div>

Hello Simon

Your ASA does seem to support L2TP remove VPN. In the example shown in the documentation below, a Windows 8 PC is connected to an ASA similar to yours using L2TP over IPsec using Pre-shared key.

> **[Configure L2TP Over IPsec Between Windows 8 PC and ASA Using Pre-shared Key](https://www.cisco.com/c/en/us/support/docs/ip/layer-two-tunnel-protocol-l2tp/200340-Configure-L2TP-Over-IPsec-Between-Window.html)**
>
> This document describes how to configure Layer 2 Tunneling Protocol (L2TP) over IPsec using pre-shared key between Cisco Adaptive Security Appliance (ASA)

I hope this has been helpful!

Laz
