Can you terminate an IPSec LAN-to-LAN tunnel on ANY IP address within a subnet that the ASA "owns" or must the IP be applied to a interface on the firewall for it to work?

[anowell]

Thank you!

[Herbert Baerten]

Hi anowell,

The IP must be applied to an interface on the ASA.

More specifically, it must be the ip address on the interface that is used to reach the peer (typically the "outside" interface).

hth

Herbert