I have an ASA 5510 (8.2.1 code). I am setting up two separat IPSec tunnels to remote networks, but each remote connection to a respective ASA interface.
Question: I know that the e0/0 ("outside") interface's security level is 0. However, does the second interface, e0/2 ("out2") security level have to be set to 0 as well?
Yes you can, just apply the respective crypto map to the interface. You might want to make e0/2 and e0/3 the same security level (if your security policy allows it) and same-security-traffic permit inter-interface. That permits communication between different interfaces that have the same security level. Then you can skip the whole NAT mess.