topic Re: Cisco ASA Multi context AWS VPN in Network Security

Cisco ASA Multi context AWS VPN

HBB — Thu, 19 Jan 2023 11:40:06 GMT

A client of mine has a Cisco ASA that's currently running on multi context mode and needs to configure a site to site VPN to his AWS VPC. Kindly advise how to go about this as VTI is not supported on ASA in multi context mode.

Re: Cisco ASA Multi context AWS VPN

MHM Cisco World — Thu, 19 Jan 2023 12:16:20 GMT

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-firewalls/200982-ASA-IPsec-VTI-connection-Amazon-Web-Serv.html

Re: Cisco ASA Multi context AWS VPN

HBB — Thu, 19 Jan 2023 13:28:46 GMT

Thank you for the prompt response. However, the article was not very helpful as it has a note at the top that says "Note: Currently VTI is only supported in single-context, routed mode" . This is exactly what I am searching for a walk-around for. ASA mutli-context mode does not support VTI and to the best of my knowledge I need VTI to setup AWS S2S VPN.

Re: Cisco ASA Multi context AWS VPN

Marvin Rhoads — Thu, 19 Jan 2023 15:29:24 GMT

A VTI (route-based) VPN is not required. You can use an "old school" policy-based VPN with crypto maps on the ASA.

You don't get the routing and (no) NAT simplicity of a VTI-based one, but it still works.

Re: Cisco ASA Multi context AWS VPN

HBB — Thu, 19 Jan 2023 15:36:54 GMT

Thank you. I thought about it earlier but I was confused as AWS does not have a policy based configuration file for ASA. I was later able to see a guide online and it works.