Vpn filter in route based ipsec l2l tunnel

[megumi35]

Hello folks, Just wanted to know that can we configure vpn-filter in route base ipsec tunnel in cisco asa. I know its working in policy based but does it work similar way in route base vpn ? Anyone tested it ?

[balaji.bandi]

check below use case : (hope this help you )

https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/214230-configure-policy-based-and-route-based-v.html

[M02@rt37]

Hello @megumi35,

Wiith a route-based VPN, you can achieve similar traffic filtering and control by employing ACLs to match the desired traffic. These ACLs are then used in the configuration to control what traffic is allowed to traverse the VPN tunnel.

Define ACL:

access-list VPN_TRAFFIC extended permit ip <source-network> <source-wildcard> <destination-network> <destination-wildcard>

Apply this ACL on crypto map:

crypto map VPN_MAP <seq-num> match address VPN_TRAFFIC

[MHM Cisco World]

Vpn-filter work for policy based vpn 

But for router based VPN apply acl directly to tunnel interface. That all what you need I think.