One-armed VPN

[david_prakken]

Does anyone know if an IOS IPSEC VPN can perform as one-armed? If so, what the pitfalls might be.

Thanks!!

[aminneker]

Yes, it can be done 'one-armed', at least as the client (initiating) end. I've never tried it on the server side.

[wong.jason]

It's working fine. Either side initiating. PIX however don't work. The ASA engine doesn't allow for it.