01-23-2022 06:46 AM
01-23-2022 06:52 AM
@Kiko9 yes you can setup an always up tunnel. If running ASA version 9.7 or newer you can use a VTI, which will always be up. Alternatively if use a crypto map you need to regularly generate traffic to keep the tunnel up.
If the ASA is behind a modem/router you need to port forward/nat udp/500 and udp/4500 to the ASAs outside interface.
01-23-2022 11:50 PM
01-24-2022 12:21 AM
@Kiko9 any ASA interface can be configured as an outside interface (WAN) and can NAT.
The difference between K8 and K9 is the K9 supports stronger encryption.
01-24-2022 03:51 AM
thanks for the explanation
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide