Context with IPSec VPN

[Guest]

Hi friends, I have an query for the below scenario. I need to create a IPSec Site-Site VPN in the Single mode firewall.Is it possible to create the tunnel. I have ASA 5510 Security Plus with Ver 8.3 Thanks in advance.

[Guest]

Pls check the attached diagram

[Guest]

Hi, You can create L2L IPsec VPN tunnels using the ASA (in this case version 8.3) in single mode.If you have the ASA in multiple-context mode you cannot, but no problem if using single mode. Hope it helps. Federico.

[Guest]

Hi Federico, Thanks for your reply, Ya, I know In multiple context would not support IPSec VPN.In my scenario, Tunnel should pass through Multiple context and reach the ASA (VPN Initiator).  Internet---------> Multiple context----------> VPN Initiator. I have a query on that, whether this multiple context may allow the VPN tunnels are not.If it is there, please send some examples for the reference. Thanks in advance Federico.

[Guest]

In your case you need ASA in multiple-context to allow VPN to pass-thru.Theres no problem with that. The only restrictions are that an ASA in multiple-context will not function as a VPN termination point (besides an admin tunnel)... but you can pass traffic or VPN traffic just like in ASAs in single-mode. Federico.