VTI thru an ASA

[tglidewell]

I like the advantages of using a VTI thru my VPN. My problem is that my ASA sits in between my remote router and my core router. Is there a way to have the IPSEC VTI traffic pass thru the ASA and terminate on my core router? I have available static IPs and interfaces on the ASA, if that is an option. I just don't want to comprise the security of my network.

[Todd Pula]

This doc is a little dated but will give you an overview of the NAT and IPSec pass-through requirements on the ASA. It doesn't speak to DVTI specifically but the concept is the same.

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008045a2d2.shtml