IPSEC Hairpining

[smckenna]

Anyone can recomend a good reference on how to set up IPSEC hairpining? we have an ASA in one city and a pix in the other. We want to be able to vpn in to one and tunnel to the other if needed.

[grant.maynard]

v7.2

To allow traffic to enter and exit the same interface, use:

same-security-traffic permit intra-interface

[smckenna]

Aha, I did

same-security-traffic permit inter-interface

thanks Grant!!!