cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
161
Views
1
Helpful
1
Replies

Suggested simpler VPN technology supported with ASA1100's?

Hello.

The enterprise is replacing DMVPN routers with ASA1100's. ASAs do not support DMVPN.

QUESTION: Must the DMVPNs be replaced with cumbersome-to-erect site-to-site IPsec tunnels, or is there a suggested simpler VPN technology supported with ASA1100's?

Thank you.

1 Accepted Solution

Accepted Solutions

@jmaxwellUSAF dVTI on the hubs and sVTI on the spokes are supported using FTD or ASA image, you can then run a dynamic routing protocol over the tunnels, which is less cumbersome to manage than a crypto map policy based VPN.  This mirrors DMVPN for Hub and spoke routing but Full Mesh (spoke-to-spoke) is not supported.

https://secure.cisco.com/secure-firewall/v7.3/docs/dynamic-virtual-template-interface-dvti

 

View solution in original post

1 Reply 1

@jmaxwellUSAF dVTI on the hubs and sVTI on the spokes are supported using FTD or ASA image, you can then run a dynamic routing protocol over the tunnels, which is less cumbersome to manage than a crypto map policy based VPN.  This mirrors DMVPN for Hub and spoke routing but Full Mesh (spoke-to-spoke) is not supported.

https://secure.cisco.com/secure-firewall/v7.3/docs/dynamic-virtual-template-interface-dvti

 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: