IPSEC VPN on inside interface

[Mokhalil82]

Hi

I need to setup an internal IPSEC VPN to a peer that is sitting internally over our MPLS. The traffic needs to be encrypted for business purposes.

Can I build a VPN on the inside interface of the ASA, so traffic that needs to go over the VPN comes in on the inside interface, then the VPN tunnel is established over the same interface. 

The ASA already has external VPNs established over the outside interface.

TIA

[Rob Ingram]

Hi,
I wouldn't have thought so. Could you not move the MPLS on to another interface of the ASA, therefore traffic would be routed from inside interface and out from the MPLS interface, no reason why that would not work.

HTH

[#Mat · Accepted solution]

Hi! Yes, it is possible. You have to use same-security-traffic permit intar-interface and check the interest traffic, nat, route, acl and enable Ike/ipsec on the inside interface.

Regards.

HTH