IPSEC connection using Multiple Context

[ccie3483]

I read that when you enable multiple contexts that it disables VPN services such as IPSEC is this true? I have a client that has two ASA across a WAN and they want to secure the traffic and extend over to either side the different VLANs.

[royalblues]

Yes its true.

Multiple context mode does not support the following features:

Dynamic routing protocols

Security contexts support only static routes. You cannot enable OSPF or RIP in multiple context mode.

•VPN

•Multicast

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/contexts.html#wp1116132

HTH

Narayan

[ccie3483]

sounds good..so what would you suggest if the following.

vlan1,2,3,4--(ASA)----WANCLOUD----(ASA)--Vl1,2,3,4

I am trying to extend the different vlans across

in a secure fashion. could i just simply trunk

the two on either side and use an IPSEC tunnel in the middle? But then i will not be able to keep the traffic separate for each vlan? any suggestions?