VTIs between ASAs

[javi1988]

Hello all,

I have 2 ASA connected with a similar configuration than the attached file. If I need to connect, let´s say, 10 more ASAs between them (full mesh). What is the easiest way to do it? I have to create new tunnel-group and a interface for each VPN?

Thank you

[MHM Cisco World]

GETVPN check this protocol as solution.

[Rob Ingram · Accepted solution]

Hi @javi1988 

Yes, you are correct. Unfortunately there is no Dynamic VTI on the ASA, so you'll need to define 10 x VTI, tunnel-groups and static route(s).

If you used a router instead of an ASA, you had the option to either using FlexVPN with Dynamic VTI or DMVPN, to build a Full Mesh design.

HTH