Site to site vpn on ASA 5505

[sasha611v]

Hi,
I was wondering the answer to a "best practices" question that has been bothering me for a while. When setting up a site to site tunnel between 2 device. Lets say site A's external address is 1.1.1.1/25 and site B's external address is 2.2.2.2/25.

Should you always map the tunnel to the external addresses at each site that you are already using or is it any better to map the tunnel to one of the unused external IP's on that external subnet?

More so, I guess what Im asking is if I keep making future external sites connect to 1.1.1.1 and I going to run into trouble when I want to deploy remote site c, d, etc...?

 

[tpulley]

I always only use the actual outside IP of the ASA. Never seen it done any other way. You are only limited to how many Concurrent VPN's your license allows.