https://community.cisco.com/t5/network-security/vpn-links/m-p/2984066#M149427 <P>Hi All,</P> <P>How can i configure a 4 VPN links with VLAN for each link on the same Physical interface in ASA 5512-x ?</P> <P></P> <P>thanks in advance</P> Tue, 12 Mar 2019 08:21:59 GMT moussa.malqui1 2019-03-12T08:21:59Z https://community.cisco.com/t5/network-security/vpn-links/m-p/2984066#M149427 <P>Hi All,</P> <P>How can i configure a 4 VPN links with VLAN for each link on the same Physical interface in ASA 5512-x ?</P> <P></P> <P>thanks in advance</P> Tue, 12 Mar 2019 08:21:59 GMT https://community.cisco.com/t5/network-security/vpn-links/m-p/2984066#M149427 moussa.malqui1 2019-03-12T08:21:59Z https://community.cisco.com/t5/network-security/vpn-links/m-p/2984067#M149428 <P>Hi</P> <P></P> <P>You can use subinterfaces on ASA and encapsulation for each vlan you want. You can do it based on the following example:</P> <DIV class="entry-content" itemprop="text"> <P>interface GigabitEthernet0/0<BR /> no nameif<BR /> no security-level<BR /> no ip address<BR /> !<BR /> interface GigabitEthernet0/0.10<BR /> description outside1<BR /> vlan 10<BR /> nameif out1<BR /> security-level 0<BR /> ip address 10.10.10.1 255.255.255.0<BR /> !<BR /> interface GigabitEthernet0/0.20<BR /> description outside2<BR /> vlan 20<BR /> nameif out2<BR /> security-level 10<BR /> ip address 10.20.20.1 255.255.255.0<BR /> !</P> <P>Then you can configure IPSEC for evey subinterface by using the following link instructions:</P> <P>http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/119141-configure-asa-00.html#anc8</P> <P>Note: You can create a crypto map for every interface after you enable ikev1 on interface</P> </DIV> Fri, 07 Oct 2016 20:07:13 GMT https://community.cisco.com/t5/network-security/vpn-links/m-p/2984067#M149428 soulasmarios 2016-10-07T20:07:13Z