Terminating Anyconnect VPN on loopback interface, Pros, Cons, Complications?

[pedramraj]

Hi ASA experts!

I am curious if anyone had experience on terminating Anyconnect VPN on loopback interface on ASA. Personally, in all my previous experiences, I used physicall outside interface for doing this. My understanding is if we use loopback interface for this, and lets say we are using RADIUS server for two factor authentication and IP address assignment, ASA is going to use its loopback IP for making the initial call to the RADIUS. Please correct me if I am wrong.

Please also share your experineces/ideas if you run/think of any other complications with this setup as well.

Many thanks in advance,

Pedram.

[Jennifer Halim · Accepted solution]

ASA doesn't have any loopback interface, and you can only terminate AnyConnect on the ASA physical interface.

[pedramraj]

Thanks Jennifer, feel way behind the time with ASA/PIX stuff now Time to catch up and update myself.