cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
422
Views
5
Helpful
2
Replies

Security-Context and Site-to-Site VPN

ingomeyers
Level 1
Level 1

I've configured multiple security contexts with asa 5550. Now I want to use for one context an IPSEC-Tunnel over the internet to connect a remote-site.(VPN Site-to-Site)

Is it possible to use overlapping IP-Ranges and can I locial seperate the VPN's ? I need the same functionality as VRF-Lite/IPSEC with an IOS Router.

2 Replies 2

5220
Level 4
Level 4

Hi,

You might want to have a look on the documentation again.

If you configure multicontext, you cannot use ISPEC or SSL anymore, along with some other features:

Unsupported Features

Multiple context mode does not support the following features:

•Dynamic routing protocols

Security contexts support only static routes. You cannot enable OSPF, RIP, or EIGRP in multiple context mode.

•VPN

•Multicast routing. Multicast bridging is supported.

•Threat Detection

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/contexts.html

Please rate if this helped.

Regards,

Daniel

Thanks for your help....and the link.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: