Key Exchange For Subnets?

[Stephen Carville]

I received a spec sheet for a P2P VPN between an ASA 5585 and our ASA 5525 with the above requirement. AFAIK, it is not an option for the Cisco ASA. I think I've seen such an option for Checkpoint but, thankfully, we don't do Checkpoint here.

OTOH, I could be wrong and would appreciate someone setting me straight.

[Rahul Govindan · Accepted solution]

No similar concept on the ASA. ASA builds a different Security Association (SA) for every Access Control Entry (ACE) on the crypto map configured on both sides. 

[Stephen Carville]

That's what I thought.  Thank you.

[jasoncoxlee]

So if asked, is this a yes or no question?!  I'm working on a P2P right now and the peer has the field on their spec sheet.  Never saw the term working with the ASA.