One arm mode on ASA

[David Niemann]

Is it possible to configure an ASA to be used for VPN only in one arm mode? We use to have a VPN 3000 concentrator that worked in one-arm mode.  It basically just provided VPN connectivity for users and NATed all their connections prior to be routed back out the same interface.  I would assume using some flavor of hair pinning configuration would be required at a minimum.

[Philip D'Ath]

I've never seen this done.  I also wouldn't recommend it.  I think it would make lots of the configurations tricky and difficult.

But - I don't see why it wouldn't work.

So if you like punishlingly difficult configurations and spending hours and hours on 5 minutes jobs you should proceed.  :-)