IPsec Site-to-Site Configuration for IPv6

[Marty1]

Hi,

Is it possible to set up site-to-site VPN tunnel for IPV6 without using VTI, similiar to how IPsec tunnels are set up in IPV4 ??

If so please let me know, I am desperately in need of help

[GioGonza · Accepted solution]

Hello @Marty1, 

Yes you can and this how you should do it: http://ciscofirewalls.weebly.com/create-a-lan-to-lan-vpn-tunnel-on-cisco-asa-with-ipv6.html, the things to take into account is the routing and that´s it :)

According to your statement about VTI on the ASA using IPv6, that´s not supported yet. This is the link for reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/configuration/vpn/asa-98-vpn-config/vpn-vti.pdf

HTH

Gio

[Marty1]

Thank you so much !! I will look into this when I get into the lab.

[Marty1]

Hi ,

i forgot to mention that I’m using two Cisco 2901 routers, will this solution work on them ? 

Cheers 

[GioGonza]

Hello @Marty1, 

I´m afraid you cannot use the link I provided before, actually I haven´t seen before the IPv6 on routers for VPN using something different than VTIs since this is the "next generation" for VPN on Router, for example DMVPN and FlexVPN. 

If I´m not mistaken, VTIs are the only way you can use IPv6 for VPN on routers. As I said before, I have never seen a crypto map VPN tunnel using IPv6 on Routers. 

HTH

Gio