Is it possible?

[netalpha200]

Hi all,

I have one Cisco ISR 2921 with VPN module. I'd like to be able to use it in order to "virtualice" independent instances for ipsec tunneling.

What I need is something like Asa security contexts, but the problem with Asa contexts is that don't support Vpns. Any idea?

I'd like to use something like independent crypto maps, so if I need to take one down, or reconfigure, I need the others to keep working. It'll be for a production environment that must be up 99.9999

Thank you for reading...

[Marcin Latosiewicz]

Ricardo,

IOS supports VRF-aware IPsec (vrf lite), which would allow you to separate logically the traffic between different VRF instances.

You can configure separate crypto maps/VTIs on different interfaces.

But to be honest you cannot guarantee 6x9 one one device, assuming something like this is unreasonable.

Marcin