same-security-traffic

[aksher]

What is the use of having same-security-traffic permit intra interface when the traffic between same interface hosts are allowed by default.

[husycisco]

Hi Aksher

This command is widely used for IPSEC traffic, for enabling Spoke-To-Spoke VPN. Lets say that you have a Site-To-Site VPN tunnel which ends at your outside interface. Consider them as "the two hosts" at outside. By default, traffic between these tunnels is disabled. And the above command permits the traffic enter and exit the same interface.

Regards