VTI with a ZBF and acls ?

[broadleon]

Hi 

Now it's possible to setup VTI's on a ASA when using IkeV2, can you setup the asa like a iOS router and set a zone based firewall with ACL's?

I would preferably like to use zones, but when I try and keep it simple and just add a ACL to a vti in the asdm, it appears on the outside interface when clicking apply. And the vti group disappears in the ACL manager.

[Mohammed al Baqari]

Yes, ASA support IKEv2 with VTI and assign ACLs.

[broadleon]

How can I assign a ACL to the vti

[Mohammed al Baqari]

access-group ACL-VTI-IN in interface VTI