topic ASA5510 with multiple context mode.does it support remoteAccessVPN? in Network Security

ASA5510 with multiple context mode.does it support remoteAccessVPN?

mubarak.mammadov — Mon, 11 Mar 2019 23:32:41 GMT

Hi,

I have 2xASA5510 with securityPlus licence.i have confugured 3 context and Active/Active Failover.Everything works fine. But also want to use rometeAccessVPN but couldn't fine anything for VPN. does it support VPN in multiple mode?Could you offer something?

ASA5510 with multiple context mode.does it support remoteAccessV

Jennifer Halim — Thu, 19 Jul 2012 04:59:56 GMT

No, VPN is not supported in multi context mode.

Here is the documentation for your reference:

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/mode_contexts.html#wp1188973

Re: ASA5510 with multiple context mode.does it support remoteAcc

Jouni Forss — Thu, 19 Jul 2012 12:58:10 GMT

I've heard that L2L VPN might become possible for multiple context mode ASAs in the future.

But VPN Client isnt either coming at all or is coming much later.

Its shame that this possiblity doesnt exist on the ASAs running multiple firewalls. It basically means you need a totally different equipment for VPN capabilites. And even then it means you have no way of virtualizing routing which again means you cant have overlapping networks on your ASA that you have dedicated only for VPN purposes.

This is especially bad when youre trying to move away from IOS VPN setups with old 6500 modules where you could use VRF:s for each VPN connection which totally eliminated the problem of overlapping networks. Configuring those VPNs to a single ASA becomes harder if you happen to have overlapping networks. (vpn pools, customer networks, L2L VPN remote networks)

- Jouni

ASA5510 with multiple context mode.does it support remoteAccessV

gaurav bhardwaj — Thu, 19 Jul 2012 13:55:27 GMT

When should you not use multiple security contexts?

If you need to provide VPN services such as remote access or site-to-site VPN tunnels.
If you need to use dynamic routing protocols. With multiple context mode, you can use only static routes.
If you need to use QoS.
If you need to support multicast routing.
If you need to provide Threat Detection.

ASA5510 with multiple context mode.does it support remoteAccessV

John Gracey — Tue, 21 Jan 2014 14:37:06 GMT

For future reference..

Multi-context and dynamic routing are supported on v9 of ASA code and above (with the exception of the ASA 5505 and the Cisco Catalyst 6500 Series ASA Services Module).

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5708/ps5709/ps12726/data_sheet_c78-714849.html