Site to site VPN between Firepower and Cisco router

[Igor_s]

Hello!

I have Firepower 1010 with real static IP and Cisco router placed behind provider's NAT.
Do I can build site-to-site between Firepower 1010 (as hub) and Cisco router (880 IOS 15.5 or ISR1100 with IOS 16.9+)?

I can't find IOS configuration manual (tunnel etc).

[Rob Ingram]

Hi @Igor_s 

Yes, this will work. You will need to configure a Policy Based VPN (crypto map), as currently FTD does not support a VTI.

They are plenty of examples of IOS VPN, but not many examples of a Site-to-Site VPN between FTD and an IOS router. Here is an example of an IOS router crypto map and here and here is another example for FTD Site to Site VPN, between them you should be able to establish a tunnel.

HTH