flexvpn on cisco ASA

[imanelan1]

Hi , is the Flex vpn supported on cisco ASA ? Thanks.

[Marvin Rhoads · Accepted solution]

No it is not (nor have I heard of any plans to do so).

[smaryala]

Marvin,

I found this link, maybe ASA's can be used as spokes in the FlexVPN configuration.

http://www.cisco.com/c/en/us/support/docs/security/flexvpn/116008-flexvpn-nge-config-00.html

Thanks,

Sunil

[Marvin Rhoads]

That article is a bit odd. I do see the title and it would indicate FlexVPN support.

However reading the body doesn't reveal how the ASA as a spoke would support certain FlexVPN functions like spoke-spoke dynamic tunnels using NHRP.

It reads more like a simple site-site IPsec IKEv2 VPN. 

[Aditya Ganjoo]

Hi,

@Marvin Yes, you are right.

The article simply describes creating Flex IKEv2 tunnel between the two devices and does not tell you about NHRP on ASA.

ASA does not support NHRP.

So we cannot run ASA as a Flexvpn spoke.

Regards,

Aditya

Please rate helpful and mark correct answers