VPN links

[moussa.malqui1]

Hi All,

How can i configure a 4 VPN links with VLAN for each link on the same Physical interface in ASA 5512-x ?

thanks in advance

[soulasmarios]

Hi

You can use subinterfaces on ASA and encapsulation for each vlan you want. You can do it based on the following example:

interface GigabitEthernet0/0
no nameif
no security-level
no ip address
!
interface GigabitEthernet0/0.10
description outside1
vlan 10
nameif out1
security-level 0
ip address 10.10.10.1 255.255.255.0
!
interface GigabitEthernet0/0.20
description outside2
vlan 20
nameif out2
security-level 10
ip address 10.20.20.1 255.255.255.0
!

Then you can configure IPSEC for evey subinterface by using the following link instructions:

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/119141-configure-asa-00.html#anc8

Note: You can create a crypto map for every interface after you enable ikev1 on interface